Trojan.GenericKD.3422287_b2215f376d

Trojan.GenericKD.3422287 (BitDefender), Trojan:Java/Adwind.P (Microsoft), UDS:DangerousObject.Multi.Generic (Kaspersky), Trojan.Win32.Generic!BT (VIPRE), Trojan.Nanocore.23 (DrWeb), Trojan.GenericKD.3422287 (B) (Emsisoft), GenericRXAC-DI!B2215F376D47 (McAfee), Trojan.Gen (Symantec), Trojan.MSIL.Injector (Ikarus), Trojan.GenericKD.3422287 (FSecure), MSIL10.ARGI (AVG), Win32:Malware-gen (Avast), TROJ_GEN.R03EC0PGM16 (TrendMicro), Trojan.GenericKD.3422287 (AdAware), Trojan-PSW.Win32.Zbot.6.FD, Trojan.Win32.Swrort.3.FD, Sinowal.YR, GenericInjector.YR, BackdoorCaphaw_QKKBAL.YR, TrojanPSWZbot.YR (Lavasoft MAS)Behaviour: Trojan-PSW, Trojan, Backdoor, Malware

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

d:d:d d-d-d

d:d:d d-d-d

/dw/generictwo.asp

/dw/generictwo.asp

kernel32.dll

kernel32.dll

psapi.dll

psapi.dll

mso.dll

mso.dll

MsoDWRecover%x

MsoDWRecover%x

MsoDWHang%x

MsoDWHang%x

Launching browser with URL

Launching browser with URL

shell32.dll

shell32.dll

%d.%d.%d.%d

%d.%d.%d.%d

%d.%d.%d.%d.x.%d.%d

%d.%d.%d.%d.x.%d.%d

shfolder.dll

shfolder.dll

unknown.sig

unknown.sig

%s dw20.exe %d.%d.%d.%d

%s dw20.exe %d.%d.%d.%d

RegKey=

RegKey=

ResponseURL=

ResponseURL=

URLLaunch=

URLLaunch=

NoExternalURL=

NoExternalURL=

%s:(%s) XX

%s:(%s) XX

%s:(%s) X

%s:(%s) X

%s:(%s)

%s:(%s)

%s:(%s) %s

%s:(%s) %s

registry.txt

registry.txt

wql.txt

wql.txt

Windows NT Version %d.%d Build: %d

Windows NT Version %d.%d Build: %d

Stage 1 server response: %s

Stage 1 server response: %s

Stage 2 server response: %s

Stage 2 server response: %s

Stage 4 server response: %s

Stage 4 server response: %s

StatusCode: %d

StatusCode: %d

Opening server: %s

Opening server: %s

HttpOpen failed.

HttpOpen failed.

Opening %s Request:

Opening %s Request:

HTTPS

HTTPS

HttpSend Failed.

HttpSend Failed.

HttpWrite Failed, GLE=%d.

HttpWrite Failed, GLE=%d.

HttpEndReq failed.

HttpEndReq failed.

Count filename length greater than MAX_PATH, can't report.

Count filename length greater than MAX_PATH, can't report.

Filesystem reporting: count file updated

Filesystem reporting: count file updated

FReportToQueue: GetLastError=%u

FReportToQueue: GetLastError=%u

FReportToQueue: File Tree Root does not exist: %S

FReportToQueue: File Tree Root does not exist: %S

Failed to add heap file to cab: %S

Failed to add heap file to cab: %S

memory.dmp

memory.dmp

mdmpmem.hdmp

mdmpmem.hdmp

version.txt

version.txt

Network reporting complete.

Network reporting complete.

Network reporting failed.

Network reporting failed.

Application Error Reporting Transfer %d

Application Error Reporting Transfer %d

Filesystem reporting complete

Filesystem reporting complete

Filesystem reporting: cab successfully written

Filesystem reporting: cab successfully written

Filesystem reporting: could not find/create directory for cab/count

Filesystem reporting: could not find/create directory for cab/count

Filesystem reporting: redirection failure, too many redirects

Filesystem reporting: redirection failure, too many redirects

Filesystem reporting: redirection failure, no previous roots

Filesystem reporting: redirection failure, no previous roots

Filesystem reporting: improper file tree root

Filesystem reporting: improper file tree root

Filesystem reporting cancelled

Filesystem reporting cancelled

Filesystem reporting: file tree root is too long

Filesystem reporting: file tree root is too long

Record: 0xxx

Record: 0xxx

Address: 0xxx

Address: 0xxx

Code: 0xx

Code: 0xx

Flags: 0xx

Flags: 0xx

x:x

x:x

(%d.%d:%d.%d)

(%d.%d:%d.%d)

Checksum: 0xx

Checksum: 0xx

Time Stamp: 0xx

Time Stamp: 0xx

Image Base: 0xx

Image Base: 0xx

Image Size: 0xx

Image Size: 0xx

Module %d

Module %d

Windows NT %d.%d Build: %d

Windows NT %d.%d Build: %d

CPU AMD Feature Code: X

CPU AMD Feature Code: X

CPU Version: X CPU Feature Code: X

CPU Version: X CPU Feature Code: X

CPU Vendor Code: X - X - X

CPU Vendor Code: X - X - X

0xx:

0xx:

0xx: x x x x

0xx: x x x x

EFlags: 0xx ESP: 0xx SegSs: 0xx

EFlags: 0xx ESP: 0xx SegSs: 0xx

EIP: 0xx EBP: 0xx SegCs: 0xx

EIP: 0xx EBP: 0xx SegCs: 0xx

EBX: 0xx ECX: 0xx EDX: 0xx

EBX: 0xx ECX: 0xx EDX: 0xx

EDI: 0xx ESI: 0xx EAX: 0xx

EDI: 0xx ESI: 0xx EAX: 0xx

Thread ID: 0xx

Thread ID: 0xx

Thread %d

Thread %d

Memory Range %d

Memory Range %d

Software\Microsoft\PCHealth\ErrorReporting\DW

Software\Microsoft\PCHealth\ErrorReporting\DW

OkToReportFromTheseQueues

OkToReportFromTheseQueues

SOFTWARE\Microsoft\Windows\CurrentVersion\Run

SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Failed to obtain queue mutex. GetLastError=%u

Failed to obtain queue mutex. GetLastError=%u

FGetQueueMutex: WaitForSingleObject returned %u

FGetQueueMutex: WaitForSingleObject returned %u

Failed to open or create queue mutex. GetLastError=%u

Failed to open or create queue mutex. GetLastError=%u

Failed queued reporting pester check

Failed queued reporting pester check

Failed to create run reg key

Failed to create run reg key

Persistent run key is set.

Persistent run key is set.

CoInitializeEx() returned 0x%x.

CoInitializeEx() returned 0x%x.

Reporting to Admin Queue

Reporting to Admin Queue

Reporting to Regular Queue

Reporting to Regular Queue

Reporting to SignOff Queue

Reporting to SignOff Queue

Reporting to Headless Queue

Reporting to Headless Queue

Reporting from Regular Queue

Reporting from Regular Queue

Reporting from SignOff Queue

Reporting from SignOff Queue

Reporting from Headless Queue

Reporting from Headless Queue

OOM Failed to alloc QueuedReportData

OOM Failed to alloc QueuedReportData

FAllocSD: GetLastError=%u

FAllocSD: GetLastError=%u

%s%s%s

%s%s%s

FEnsureQueueDirW: GetLastError=%u

FEnsureQueueDirW: GetLastError=%u

Failed to write snt. GLE: %u

Failed to write snt. GLE: %u

Failed to create snt. GLE: %u

Failed to create snt. GLE: %u

Failed to set info; bad queue type: %u

Failed to set info; bad queue type: %u

Failed to open reg key for queue

Failed to open reg key for queue

Failed to get windows folder path for queue: %u

Failed to get windows folder path for queue: %u

Failed to move instr file from queue A to queue B - %u

Failed to move instr file from queue A to queue B - %u

Failed to move cab file from queue A to queue B - %u

Failed to move cab file from queue A to queue B - %u

Did not move any reports from admin q to user q

Did not move any reports from admin q to user q

Did not move any reports from user q to headless q

Did not move any reports from user q to headless q

Queue types that have reports: %u

Queue types that have reports: %u

Setting triggerAtConnectionMade to: %u

Setting triggerAtConnectionMade to: %u

Setting triggerAtLogon to: %u

Setting triggerAtLogon to: %u

Setting the queue trigger based upon: %u

Setting the queue trigger based upon: %u

SUCCESS adding report to queue

SUCCESS adding report to queue

Launched (%S)

Launched (%S)

Failed to store the SensSubscription. hr: %d

Failed to store the SensSubscription. hr: %d

failed to allocate PROGID string: %S

failed to allocate PROGID string: %S

Failed putting SubscriberInterface. hr: %d

Failed putting SubscriberInterface. hr: %d

Failed putting PerUser. hr: %d

Failed putting PerUser. hr: %d

Failed putting Enabled. hr: %d

Failed putting Enabled. hr: %d

Failed putting MachineName. hr: %d

Failed putting MachineName. hr: %d

Failed putting OwnerSID. hr: %d

Failed putting OwnerSID. hr: %d

Failed putting Description. hr: %d

Failed putting Description. hr: %d

Failed putting InterfaceID. hr: %d

Failed putting InterfaceID. hr: %d

Failed putting EventClassID. hr: %d

Failed putting EventClassID. hr: %d

Failed putting MethodName. hr: %d

Failed putting MethodName. hr: %d

Failed putting SubscriptionName. hr: %d

Failed putting SubscriptionName. hr: %d

Failed putting PublisherID. hr: %d

Failed putting PublisherID. hr: %d

Failed putting SubscriberCLSID. hr: %d

Failed putting SubscriberCLSID. hr: %d

Failed putting SubscriptionID. hr: %d

Failed putting SubscriptionID. hr: %d

Failed CoCreateInstance on EventSubscription. hr: %d

Failed CoCreateInstance on EventSubscription. hr: %d

Failed to remove the SensSubscription. hr: %d

Failed to remove the SensSubscription. hr: %d

failed to allocate query string: %S

failed to allocate query string: %S

Failed CoCreateInstance on EventSystem. hr: %d

Failed CoCreateInstance on EventSystem. hr: %d

SENS: StringFromIID() returned

SENS: StringFromIID() returned

DWSHARED: SysAllocString(%s) failed!

DWSHARED: SysAllocString(%s) failed!

Failed to subscribe subscription %u. hr: %d

Failed to subscribe subscription %u. hr: %d

Failed to get data for subscription %u. hr: %d

Failed to get data for subscription %u. hr: %d

Failed to query install reg key

Failed to query install reg key

Failed to open install reg key

Failed to open install reg key

Software\Microsoft\PCHealth\ErrorReporting\DW\Installed

Software\Microsoft\PCHealth\ErrorReporting\DW\Installed

HKEY_USERS\

HKEY_USERS\

HKEY_CURRENT_CONFIG\

HKEY_CURRENT_CONFIG\

HKEY_CLASSES_ROOT\

HKEY_CLASSES_ROOT\

HKEY_LOCAL_MACHINE\

HKEY_LOCAL_MACHINE\

HKEY_CURRENT_USER\

HKEY_CURRENT_USER\

initing CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d

initing CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d

freeing CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d

freeing CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d

0addref CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d

0addref CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d

QIing CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d

QIing CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d

releasing CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d

releasing CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d

deleting CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d

deleting CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d

creating CDwAccessible: hwnd %x, idc %d

creating CDwAccessible: hwnd %x, idc %d

WriteAtOffset.Write(0x%x) failed, 0xx

WriteAtOffset.Write(0x%x) failed, 0xx

WriteAtOffset.Seek(0x%x) failed, 0xx

WriteAtOffset.Seek(0x%x) failed, 0xx

WriteMemoryFromProcess.Read(0x%I64x, 0x%x) failed, 0xx

WriteMemoryFromProcess.Read(0x%I64x, 0x%x) failed, 0xx

WriteStringToPool.Write(0x%x) failed, 0xx

WriteStringToPool.Write(0x%x) failed, 0xx

WriteFunctionTable.RawEntries.Write(0x%x) failed, 0xx

WriteFunctionTable.RawEntries.Write(0x%x) failed, 0xx

WriteFunctionTable.RawTable.Write(0x%x) failed, 0xx

WriteFunctionTable.RawTable.Write(0x%x) failed, 0xx

WriteFunctionTableList.DumpTable.Write(0x%x) failed, 0xx

WriteFunctionTableList.DumpTable.Write(0x%x) failed, 0xx

WriteFunctionTableList.Seek(0x%x) failed, 0xx

WriteFunctionTableList.Seek(0x%x) failed, 0xx

WriteDirectoryEntry.Write(0x%x) failed, 0xx

WriteDirectoryEntry.Write(0x%x) failed, 0xx

Thread(0x%x) callback returned FALSE

Thread(0x%x) callback returned FALSE

WriteSystemInfo.GetOsCsdString failed, 0xx

WriteSystemInfo.GetOsCsdString failed, 0xx

WriteSystemInfo.GetCpuInfo failed, 0xx

WriteSystemInfo.GetCpuInfo failed, 0xx

CalculateSizeForSystemInfo.GetOsCsdString failed, 0xx

CalculateSizeForSystemInfo.GetOsCsdString failed, 0xx

WriteHeader.GetCurrentTimeDate failed, 0xx

WriteHeader.GetCurrentTimeDate failed, 0xx

WriteDirectoryTable.Seek(0x%x) failed, 0xx

WriteDirectoryTable.Seek(0x%x) failed, 0xx

WriteMemoryInfo.Write(0x%x) failed, 0xx

WriteMemoryInfo.Write(0x%x) failed, 0xx

WriteMemoryInfo.QueryVirtual(0x%I64x) failed, 0xx

WriteMemoryInfo.QueryVirtual(0x%I64x) failed, 0xx

WriteFullMemory virtual memory layout changed, retries %d, 0x%I64x (0x%I64x:0x%I64x) vs. 0x%I64x (0x%I64x:0x%I64x)

WriteFullMemory virtual memory layout changed, retries %d, 0x%I64x (0x%I64x:0x%I64x) vs. 0x%I64x (0x%I64x:0x%I64x)

WriteFullMemory.Memory.Write(0x%x) failed, 0xx

WriteFullMemory.Memory.Write(0x%x) failed, 0xx

WriteFullMemory.Memory.Read(0x%I64x, 0x%x) failed, retries %d, 0xx

WriteFullMemory.Memory.Read(0x%I64x, 0x%x) failed, retries %d, 0xx

WriteFullMemory.QueryVirtual(0x%I64x) for data failed, 0xx

WriteFullMemory.QueryVirtual(0x%I64x) for data failed, 0xx

WriteFullMemory.Desc.Write(0x%x) failed, 0xx

WriteFullMemory.Desc.Write(0x%x) failed, 0xx

WriteFullMemory.QueryVirtual(0x%I64x) for info failed, 0xx

WriteFullMemory.QueryVirtual(0x%I64x) for info failed, 0xx

Kernel minidump write failed, 0xx

Kernel minidump write failed, 0xx

MarshalExceptionPointers.CxRecord.Read(0x%I64x, 0x%x) failed, 0xx

MarshalExceptionPointers.CxRecord.Read(0x%I64x, 0x%x) failed, 0xx

MarshalExceptionPointers.ExRecord.Read(0x%I64x, 0x%x) failed, 0xx

MarshalExceptionPointers.ExRecord.Read(0x%I64x, 0x%x) failed, 0xx

Invalid exception record parameter count (0x%x)

Invalid exception record parameter count (0x%x)

Invalid exception record size (0x%x)

Invalid exception record size (0x%x)

Invalid CPU type (0x%x)

Invalid CPU type (0x%x)

Invalid function table size (0x%x)

Invalid function table size (0x%x)

GetSystemType.GetOsInfo failed, 0xx

GetSystemType.GetOsInfo failed, 0xx

GetSystemType.GetCpuType failed, 0xx

GetSystemType.GetCpuType failed, 0xx

Write.Start failed, 0xx

Write.Start failed, 0xx

Dump type requires streaming but output provider does not support streaming

Dump type requires streaming but output provider does not support streaming

Invalid dump type 0x%x

Invalid dump type 0x%x

dbghelp.dll

dbghelp.dll

Alloc(0x%x) failed

Alloc(0x%x) failed

Thread(0x%x) will not be included

Thread(0x%x) will not be included

GenGetImageSections.Section.Read(0x%I64x, 0x%x) failed, 0xx

GenGetImageSections.Section.Read(0x%I64x, 0x%x) failed, 0xx

GenGetImageSections.GenImageNtHeader(0x%I64x) failed

GenGetImageSections.GenImageNtHeader(0x%I64x) failed

GenGetImageSections.Read(0x%I64x, 0x%x) failed, 0xx

GenGetImageSections.Read(0x%I64x, 0x%x) failed, 0xx

0GenAllocateThreadObject.GetTebInfo(0x%x) failed, 0xx

0GenAllocateThreadObject.GetTebInfo(0x%x) failed, 0xx

GenAllocateThreadObject.GetContext(0x%x) failed, 0xx

GenAllocateThreadObject.GetContext(0x%x) failed, 0xx

GenAllocateThreadObject.Open(0x%x) failed, 0xx

GenAllocateThreadObject.Open(0x%x) failed, 0xx

GenReadTlsDirectory.Index(0x%I64x, %ws) failed, 0xx

GenReadTlsDirectory.Index(0x%I64x, %ws) failed, 0xx

GenReadTlsDirectory(0x%I64x, %ws) unknown machine 0x%x

GenReadTlsDirectory(0x%I64x, %ws) unknown machine 0x%x

GenReadTlsDirectory.Read(0x%I64x, %ws) failed, 0xx

GenReadTlsDirectory.Read(0x%I64x, %ws) failed, 0xx

GenAllocateModuleObject.GenDebugRecord(0x%I64x, %ws) failed, 0xx

GenAllocateModuleObject.GenDebugRecord(0x%I64x, %ws) failed, 0xx

GenAllocateModuleObject.GenImageNtHeader(0x%I64x, %ws) failed, 0xx

GenAllocateModuleObject.GenImageNtHeader(0x%I64x, %ws) failed, 0xx

GenAllocateModuleObject.GetImageHeaderInfo(0x%I64x, %ws) failed, 0xx

GenAllocateModuleObject.GetImageHeaderInfo(0x%I64x, %ws) failed, 0xx

GenAllocateModuleObject.GetVersion(0x%I64x, %ws) failed, 0xx

GenAllocateModuleObject.GetVersion(0x%I64x, %ws) failed, 0xx

GenAllocateProcessObject.GetPeb(0x%x) failed, 0xx

GenAllocateProcessObject.GetPeb(0x%x) failed, 0xx

GenIncludeUnwindInfoMemory.Enum(0x%I64x, 0x%x) failed, 0xx

GenIncludeUnwindInfoMemory.Enum(0x%I64x, 0x%x) failed, 0xx

GenGenTebMemory.TLS(0x%I64x) failed, 0xx

GenGenTebMemory.TLS(0x%I64x) failed, 0xx

GenScanAddressSpace.QueryVirtual(0x%I64x) failed, 0xx

GenScanAddressSpace.QueryVirtual(0x%I64x) failed, 0xx

0GenGetAuxMemory(%ws) failed, 0xx

0GenGetAuxMemory(%ws) failed, 0xx

GenGetProcessInfo.EnumUnloadedModules(0x%x) failed, 0xx

GenGetProcessInfo.EnumUnloadedModules(0x%x) failed, 0xx

GenGetProcessInfo.EnumUnloadedModules(0x%x) looped

GenGetProcessInfo.EnumUnloadedModules(0x%x) looped

GenGetProcessInfo.EnumFunctionTableEntries(0x%I64x, 0x%x) failed, 0xx

GenGetProcessInfo.EnumFunctionTableEntries(0x%I64x, 0x%x) failed, 0xx

GenGetProcessInfo.EnumFunctionTables(0x%x) failed, 0xx

GenGetProcessInfo.EnumFunctionTables(0x%x) failed, 0xx

GenGetProcessInfo.EnumFunctionTables(0x%x) looped

GenGetProcessInfo.EnumFunctionTables(0x%x) looped

GenGetProcessInfo.EnumModules(0x%x) failed, 0xx

GenGetProcessInfo.EnumModules(0x%x) failed, 0xx

GenGetProcessInfo.EnumModules(0x%x) looped

GenGetProcessInfo.EnumModules(0x%x) looped

GenGetProcessInfo.EnumThreads(0x%x) failed, 0xx

GenGetProcessInfo.EnumThreads(0x%x) failed, 0xx

GenGetProcessInfo.EnumThreads(0x%x) looped

GenGetProcessInfo.EnumThreads(0x%x) looped

GenGetProcessInfo.Start(0x%x) failed, 0xx

GenGetProcessInfo.Start(0x%x) failed, 0xx

GenWriteHandleData.Desc.Write(0x%x) failed, 0xx

GenWriteHandleData.Desc.Write(0x%x) failed, 0xx

GenWriteHandleData.Header.Write(0x%x) failed, 0xx

GenWriteHandleData.Header.Write(0x%x) failed, 0xx

GenWriteHandleData.ObjectName.Write(0x%x) failed, 0xx

GenWriteHandleData.ObjectName.Write(0x%x) failed, 0xx

GenWriteHandleData.ObjectNameLen.Write(0x%x) failed, 0xx

GenWriteHandleData.ObjectNameLen.Write(0x%x) failed, 0xx

GenWriteHandleData.TypeName.Write(0x%x) failed, 0xx

GenWriteHandleData.TypeName.Write(0x%x) failed, 0xx

GenWriteHandleData.TypeNameLen.Write(0x%x) failed, 0xx

GenWriteHandleData.TypeNameLen.Write(0x%x) failed, 0xx

GenWriteHandleData.Start(0x%x) failed, 0xx

GenWriteHandleData.Start(0x%x) failed, 0xx

GenWriteHandleData.Seek(0x%x) failed, 0xx

GenWriteHandleData.Seek(0x%x) failed, 0xx

Software\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls

Software\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls

Software\Microsoft\Windows NT\CurrentVersion\KnownManagedDebuggingDlls

Software\Microsoft\Windows NT\CurrentVersion\KnownManagedDebuggingDlls

version.dll

version.dll

ntdll.dll

ntdll.dll

%$%,%4%

%$%,%4%

S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%

S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%

b%c%d%e%f%g%h%i%j%k%l%

b%c%d%e%f%g%h%i%j%k%l%

!"#$%&'()* ,-./0123456789:;

!"#$%&'()* ,-./0123456789:;

!!!!2222

!!!!2222

%%%f||||

%%%f||||

!!!!2222||||

!!!!2222||||

!"#$%&'(

!"#$%&'(

'()* ,-./0

'()* ,-./0

&'()* ,-./

&'()* ,-./

&'()* ,-./012345

&'()* ,-./012345

3456789

3456789

.ASex

.ASex

!"#$%&'()* ,-./012

!"#$%&'()* ,-./012

!"#$%&'()

!"#$%&'()

?msodatad.dat

?msodatad.dat

msodatalast.dat

msodatalast.dat

Unicows.dll

Unicows.dll

Kernel32.dll

Kernel32.dll

SHLWAPI.DLL

SHLWAPI.DLL

GDI32.DLL

GDI32.DLL

wintrust.dll

wintrust.dll

1108160

1108160

0u.hN

0u.hN

0SSh

0SSh

t.WWWj

t.WWWj

PSSh07

PSSh07

t5SSh(

t5SSh(

PSSSSSSh

PSSSSSSh

0SSSSh

0SSSSh

ADVAPI32.dll

ADVAPI32.dll

COMCTL32.dll

COMCTL32.dll

GDI32.dll

GDI32.dll

KERNEL32.dll

KERNEL32.dll

OLEACC.dll

OLEACC.dll

OLEAUT32.dll

OLEAUT32.dll

MSVCRT.dll

MSVCRT.dll

RPCRT4.dll

RPCRT4.dll

SHELL32.dll

SHELL32.dll

SHLWAPI.dll

SHLWAPI.dll

urlmon.dll

urlmon.dll

USER32.dll

USER32.dll

VERSION.dll

VERSION.dll

WININET.dll

WININET.dll

RegCloseKey

RegCloseKey

RegOpenKeyExA

RegOpenKeyExA

RegCreateKeyExA

RegCreateKeyExA

ReportEventA

ReportEventA

ReportEventW

ReportEventW

RegEnumKeyExA

RegEnumKeyExA

RegQueryInfoKeyA

RegQueryInfoKeyA

RegQueryInfoKeyW

RegQueryInfoKeyW

GetProcessHeap

GetProcessHeap

GetSystemWindowsDirectoryW

GetSystemWindowsDirectoryW

_amsg_exit

_amsg_exit

_acmdln

_acmdln

ShellExecuteExA

ShellExecuteExA

UrlGetPartA

UrlGetPartA

CreateURLMoniker

CreateURLMoniker

CreateDialogIndirectParamA

CreateDialogIndirectParamA

EnumWindows

EnumWindows

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestExA

HttpSendRequestExA

HttpOpenRequestA

HttpOpenRequestA

InternetCanonicalizeUrlA

InternetCanonicalizeUrlA

InternetCrackUrlA

InternetCrackUrlA

HttpEndRequestA

HttpEndRequestA

dw20.pdb

dw20.pdb

\devsplab1\otools\BBT_TEMP\DW20O.pdb

\devsplab1\otools\BBT_TEMP\DW20O.pdb

winword.exe

winword.exe

wwordlt.exe

wwordlt.exe

excel.exe

excel.exe

excellt.exe

excellt.exe

mspub.exe

mspub.exe

frontpg.exe

frontpg.exe

outlook.exe

outlook.exe

powerpnt.exe

powerpnt.exe

powpntlt.exe

powpntlt.exe

onenote.exe

onenote.exe

infopath.exe

infopath.exe

winproj.exe

winproj.exe

ois.exe

ois.exe

visio.exe

visio.exe

`!`'`)` `

`!`'`)` `

e%f-f|3 f'f/f

e%f-f|3 f'f/f

]!^"^#^ ^$^

]!^"^#^ ^$^

t.uGuHu

t.uGuHu

x4x7x%x-x x

x4x7x%x-x x

h&h(h.hMh:h%h h,k/k-k1k4kmk

h&h(h.hMh:h%h h,k/k-k1k4kmk

k%lzmcmdmvm

k%lzmcmdmvm

^Q]Q~NzP}P\PGPCPLPZPIPePvPNPUPuPtPwPOP

^Q]Q~NzP}P\PGPCPLPZPIPePvPNPUPuPtPwPOP

]8^6^3^7^

]8^6^3^7^

ichczc]eVeQeYeWe_UOeXeUeTe

ichczc]eVeQeYeWe_UOeXeUeTe

{1{ {-{/{2{8{

{1{ {-{/{2{8{

r6s%s4s)s:t*t3t"t%t5t6t4t/t

r6s%s4s)s:t*t3t"t%t5t6t4t/t

t&t(t%u&ukuju

t&t(t%u&ukuju

WHX%X

WHX%X

`IaJa aEa6a2a.aFa/aOa)a@a bh

`IaJa aEa6a2a.aFa/aOa)a@a bh

d@d%d'd

d@d%d'd

duewexei

duewexei

kCpDpJpHpIpEpFp

kCpDpJpHpIpEpFp

S$S%S&S'S(S)S S,S.S2S3S5S6S8S:S;SBSFSKSNSOSPSUSVSXSYS[S]S_SbSdSeSgShSiSjSkSmStSvSzS}S~S

S$S%S&S'S(S)S S,S.S2S3S5S6S8S:S;SBSFSKSNSOSPSUSVSXSYS[S]S_SbSdSeSgShSiSjSkSmStSvSzS}S~S

U U!U"U#U$U%U(U)U U:U=U?UBUGUIULUSUTUXUYUZU[U]U`UgUhUiUkUlUmUnUoUpUqUrUsUtUxUyUzU

U U!U"U#U$U%U(U)U U:U=U?UBUGUIULUSUTUXUYUZU[U]U`UgUhUiUkUlUmUnUoUpUqUrUsUtUxUyUzU

c c!c"c#c$c%c&c'c.c0c1c5c7c?cRcSc[c\c]c^c_c`cacbcccdcfcjclcsctcyc~c

c c!c"c#c$c%c&c'c.c0c1c5c7c?cRcSc[c\c]c^c_c`cacbcccdcfcjclcsctcyc~c

m!m#m$m&mCmDmEmFmGmHmImJmKmLmMmNmOmPmQmRmSmTmUmVmWm[m\m]mkmqmrmsm

m!m#m$m&mCmDmEmFmGmHmImJmKmLmMmNmOmPmQmRmSmTmUmVmWm[m\m]mkmqmrmsm

nRsSsh

nRsSsh

evg%f

evg%f

m.tRa

m.tRa

gtr%x

gtr%x

Q%SKg

Q%SKg

f.ebp>QI

f.ebp>QI

y.yxT

y.yxT

fn:q%uN

fn:q%uN

aw.Toiz

aw.Toiz

RMeXe

RMeXe

S#S$S%S;ScSdSrSsStSuS

S#S$S%S;ScSdSrSsStSuS

`!`"`&`'`)`*` `,`-`.`/`0`2`3`4`5`6`:`=`>`?`

`!`"`&`'`)`*` `,`-`.`/`0`2`3`4`5`6`:`=`>`?`

^ ^!^"^#^$^%^&^'^.^}^

^ ^!^"^#^$^%^&^'^.^}^

c c!c"c#c$c%c&c'c*c7c:c;cSc[c1e?e@eAeBeCeDeEe

c c!c"c#c$c%c&c'c*c7c:c;cSc[c1e?e@eAeBeCeDeEe

f f!f"f#f$f%f&f'f(f)f*f f,f-f

f f!f"f#f$f%f&f'f(f)f*f f,f-f

m m!m"m#m$m%m&m'm(m)m*m m,m-m.m1m2m3m4m5m6m7m8m9m:m;mm?m@mBmCmDmGmHmImJmKmLmMmNmOmPmQmRmSmTmUm

m m!m"m#m$m%m&m'm(m)m*m m,m-m.m1m2m3m4m5m6m7m8m9m:m;mm?m@mBmCmDmGmHmImJmKmLmMmNmOmPmQmRmSmTmUm

u u-u.uFuGuHuIuJuKuLuMuNuOuPuQuRuSu

u u-u.uFuGuHuIuJuKuLuMuNuOuPuQuRuSu

U U!U"U#U$U%U&U'U(U4UJU

U U!U"U#U$U%U&U'U(U4UJU

](^)^*^ ^,^-^/^0^1^

](^)^*^ ^,^-^/^0^1^

m/mAmFmVmWmXmYmZm[m\m]m^m_m`mambmcmdmemfmgmhmimjmkmlmmmnmompmqmrmsmtmumvmwmxmymzm{m|m}m~m

m/mAmFmVmWmXmYmZm[m\m]m^m_m`mambmcmdmemfmgmhmimjmkmlmmmnmompmqmrmsmtmumvmwmxmymzm{m|m}m~m

x x!x"x#x$x%x'x(x)x*x x,x.x/x0x1x2x3x4x5x6x7x8x9x:x;xx?x@xAxXy_yaycydyeygyiyjykylynyoy

x x!x"x#x$x%x'x(x)x*x x,x.x/x0x1x2x3x4x5x6x7x8x9x:x;xx?x@xAxXy_yaycydyeygyiyjykylynyoy

} }!}"}#}$}%}&}'}

} }!}"}#}$}%}&}'}

] ]!]"]#]$]%]&]'](])]*] ],]-].]/]0]

] ]!]"]#]$]%]&]'](])]*] ],]-].]/]0]

]2^3^4^5^6^7^8^9^:^;^^

]2^3^4^5^6^7^8^9^:^;^^

cMeNeOePeQeReSeTeUeWeXeYeZe[e]ebe

cMeNeOePeQeReSeTeUeWeXeYeZe[e]ebe

X X!X"X#X$X%X&X'X(X)X*X X,X-X.X/X0X1X3X4X6X7X8X9X:X;XX?X@XAXBXCXDXEXFXGXHXJXTX_X`XfXmX

X X!X"X#X$X%X&X'X(X)X*X X,X-X.X/X0X1X3X4X6X7X8X9X:X;XX?X@XAXBXCXDXEXFXGXHXJXTX_X`XfXmX

d%d-d0d=dRdad2e\e^e_e`eaecedeeefegeheiejele

d%d-d0d=dRdad2e\e^e_e`eaecedeeefegeheiejele

s"s#s$s%s&s(s)s,s-s/s0s1s2s3s4s5s6s8s9s>s@sGs

s"s#s$s%s&s(s)s,s-s/s0s1s2s3s4s5s6s8s9s>s@sGs

u$u%u&u/ujukulumunuouqurusutu

u$u%u&u/ujukulumunuouqurusutu

duewexeyeze{e

duewexeyeze{e

~ ~!~"~#~$~%~&~'~(~*~ ~-~8~:~0

~ ~!~"~#~$~%~&~'~(~*~ ~-~8~:~0

| |!|"|#|$|%|&|(|)|*|-|.|/|0|1|2|6|

| |!|"|#|$|%|&|(|)|*|-|.|/|0|1|2|6|

{3~3}3|3

{3~3}3|3

eZl%u

eZl%u

Q.YeY

Q.YeY

R:\Sg|p5rL

R:\Sg|p5rL

e$e#e e4e5e7e6e8eKuHeVeUeMeXe^e]erexei

e$e#e e4e5e7e6e8eKuHeVeUeMeXe^e]erexei

s4s/s)s%s>sNsOs

s4s/s)s%s>sNsOs

s&t*t)t.tbt

s&t*t)t.tbt

2%2.bx

2%2.bx

{ | }9},

{ | }9},

d6exe9j

d6exe9j

]%sOu4](n

]%sOu4](n

m.t.zB}

m.t.zB}

w%xIyWy

w%xIyWy

^vcÓv

^vcÓv

%f?iCt

%f?iCt

U>_.lE

U>_.lE

f.ebp

f.ebp

.nrR=

.nrR=

{fn:q%uN

{fn:q%uN

crys.exe

crys.exe

name="Microsoft.Windows.ErrorReporter"

name="Microsoft.Windows.ErrorReporter"

version="5.1.0.0"

version="5.1.0.0"

publicKeyToken="6595b64144ccf1df" />

publicKeyToken="6595b64144ccf1df" />

Windows Error Reporting

Windows Error Reporting

name="Microsoft.Windows.Common-Controls"

name="Microsoft.Windows.Common-Controls"

version="6.0.0.0"

version="6.0.0.0"

publicKeyToken="6595b64144ccf1df"

publicKeyToken="6595b64144ccf1df"

1%s\%s\%s\%s\%s\%s\%s\%s

1%s\%s\%s\%s\%s\%s\%s\%s

AppName: %s AppVer: %s AppStamp:%s

AppName: %s AppVer: %s AppStamp:%s

ModName: %s ModVer: %s ModStamp:%s

ModName: %s ModVer: %s ModStamp:%s

fDebug: %s Offset: %s

fDebug: %s Offset: %s

Main_AlwaysReportBtn=

Main_AlwaysReportBtn=

Main_NoReportBtn=

Main_NoReportBtn=

Main_ReportBtn=

Main_ReportBtn=

General_Reportee=

General_Reportee=

CheckBoxRegKey=

CheckBoxRegKey=

ReportingFlags=

ReportingFlags=

Stage1URL=

Stage1URL=

Stage2URL=

Stage2URL=

%General_Reportee%

%General_Reportee%

%u %s

%u %s

%u.%u %s

%u.%u %s

%s %s %s %s in %s %s %s fDebug %s at offset %s

%s %s %s %s in %s %s %s fDebug %s at offset %s

Bucket: d

Bucket: d

BucketTable %d

BucketTable %d

%s, %s, %s, %s, %s, %s, %s, %s, %s, %s %s

%s, %s, %s, %s, %s, %s, %s, %s, %s, %s %s

\dw.log

\dw.log

policy.txt

policy.txt

crash.log

crash.log

status.txt

status.txt

hits.log

hits.log

count.txt

count.txt

%s\%s\%s

%s\%s\%s

%s\%s\%s\%s

%s\%s\%s\%s

eDWQueuedReporting

eDWQueuedReporting

DWPersistentQueuedReporting

DWPersistentQueuedReporting

"%s\%s" -%c

"%s\%s" -%c

dwtrig20.exe

dwtrig20.exe

ReportSize=

ReportSize=

\*.cab

\*.cab

dwq.snt

dwq.snt

"%s" -%c %u

"%s" -%c %u

SEventSystem.EventSubscription

SEventSystem.EventSubscription

SubscriptionID=%s

SubscriptionID=%s

#$%&%&'(

#$%&%&'(

Comctl32.dll

Comctl32.dll

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\14B8B0.dmp

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\14B8B0.dmp

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp

.NET Runtime 2.0 Error Reporting

.NET Runtime 2.0 Error Reporting

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\dw.log

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\dw.log

Microsoft Application Error Reporting

Microsoft Application Error Reporting

11.0.8160

11.0.8160

Windows

Windows

DW20.Exe

DW20.Exe

cry.exe_372_rwx_03EE0000_0003B000:

.text

.text

`.data

`.data

.reloc

.reloc

%s, u %s %u u:u:u GMT

%s, u %s %u u:u:u GMT

HTTP/1.1

HTTP/1.1

HTTP/1.0

HTTP/1.0

hXXp://

hXXp://

; charset=%s

; charset=%s

HTTP/1.1 %u %s

HTTP/1.1 %u %s

Date: %s

Date: %s

Content-Length: %u

Content-Length: %u

Expires: %s

Expires: %s

Content-Type: %s%s

Content-Type: %s%s

ID: %s

ID: %s

value_%s

value_%s

value_%s_%s

value_%s_%s

%s = "%s";

%s = "%s";

update.exe

update.exe

config.bin

config.bin

PR_OpenTCPSocket

PR_OpenTCPSocket

cit_ffcookie.module

cit_ffcookie.module

cit_video.module

cit_video.module

%ds~U;MM

%ds~U;MM

userenv.dll

userenv.dll

del "%s"

del "%s"

if exist "%s" goto d

if exist "%s" goto d

del /F "%s"

del /F "%s"

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1)

urlmon.dll

urlmon.dll

cabinet.dll

cabinet.dll

hXXp://xxxxxxxx.com/xxxx/xxxx.php

hXXp://xxxxxxxx.com/xxxx/xxxx.php

%s%s%s

%s%s%s

gdiplus.dll

gdiplus.dll

GdiplusShutdown

GdiplusShutdown

ole32.dll

ole32.dll

gdi32.dll

gdi32.dll

6;:5;66"

6;:5;66"

,1;(,; = 1

,1;(,; = 1

'472%9,{

'472%9,{

F@ICTQ}cRTWAunO}mmts}NX~csgzn~)[jzyemer\]ika

F@ICTQ}cRTWAunO}mmts}NX~csgzn~)[jzyemer\]ika

8/3.xae4LOa

8/3.xae4LOa

6 !26!1'1!

6 !26!1'1!

hXXps://

hXXps://

HTTP/1.

HTTP/1.

facebook.com

facebook.com

Cookie: %s

Cookie: %s

Referer: %s

Referer: %s

Accept: %s

Accept: %s

Accept-Language: %s

Accept-Language: %s

Accept-Encoding: %s

Accept-Encoding: %s

_getFirefoxCookie

_getFirefoxCookie

hXXp://VVV.google.com/webhp

hXXp://VVV.google.com/webhp

SSShD

SSShD

SSShXe

SSShXe

SSShye

SSShye

GetProcessHeap

GetProcessHeap

CreatePipe

CreatePipe

KERNEL32.dll

KERNEL32.dll

MsgWaitForMultipleObjects

MsgWaitForMultipleObjects

OpenWindowStationW

OpenWindowStationW

GetProcessWindowStation

GetProcessWindowStation

CreateWindowStationW

CreateWindowStationW

CloseWindowStation

CloseWindowStation

SetProcessWindowStation

SetProcessWindowStation

SetKeyboardState

SetKeyboardState

ExitWindowsEx

ExitWindowsEx

GetKeyboardState

GetKeyboardState

MapVirtualKeyW

MapVirtualKeyW

GetKeyboardLayoutList

GetKeyboardLayoutList

USER32.dll

USER32.dll

RegCreateKeyExW

RegCreateKeyExW

RegOpenKeyExW

RegOpenKeyExW

RegCloseKey

RegCloseKey

RegCreateKeyW

RegCreateKeyW

RegEnumKeyW

RegEnumKeyW

RegQueryInfoKeyW

RegQueryInfoKeyW

RegEnumKeyExW

RegEnumKeyExW

ADVAPI32.dll

ADVAPI32.dll

UrlUnescapeA

UrlUnescapeA

SHDeleteKeyW

SHDeleteKeyW

PathIsURLW

PathIsURLW

SHLWAPI.dll

SHLWAPI.dll

ShellExecuteW

ShellExecuteW

SHELL32.dll

SHELL32.dll

Secur32.dll

Secur32.dll

SetViewportOrgEx

SetViewportOrgEx

GDI32.dll

GDI32.dll

WS2_32.dll

WS2_32.dll

PFXImportCertStore

PFXImportCertStore

CertDeleteCertificateFromStore

CertDeleteCertificateFromStore

CertOpenSystemStoreW

CertOpenSystemStoreW

CertCloseStore

CertCloseStore

CertEnumCertificatesInStore

CertEnumCertificatesInStore

CertDuplicateCertificateContext

CertDuplicateCertificateContext

PFXExportCertStoreEx

PFXExportCertStoreEx

CRYPT32.dll

CRYPT32.dll

HttpSendRequestExA

HttpSendRequestExA

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestExW

HttpSendRequestExW

HttpSendRequestW

HttpSendRequestW

HttpOpenRequestA

HttpOpenRequestA

HttpOpenRequestW

HttpOpenRequestW

HttpEndRequestA

HttpEndRequestA

HttpSendRequestA

HttpSendRequestA

HttpEndRequestW

HttpEndRequestW

InternetCrackUrlA

InternetCrackUrlA

HttpAddRequestHeadersW

HttpAddRequestHeadersW

GetUrlCacheEntryInfoW

GetUrlCacheEntryInfoW

HttpAddRequestHeadersA

HttpAddRequestHeadersA

WININET.dll

WININET.dll

OLEAUT32.dll

OLEAUT32.dll

NETAPI32.dll

NETAPI32.dll

VERSION.dll

VERSION.dll

WINMM.dll

WINMM.dll

PSSSSSSh

PSSSSSSh

3$3*30383

3$3*30383

6|7k7u7

6|7k7u7

9 :1:::@:

9 :1:::@:

42>204:4

42>204:4

sXXXX

sXXXX

nspr4.dll

nspr4.dll

chrome.dll

chrome.dll

\StringFileInfo\xx\%s

\StringFileInfo\xx\%s

ntdll.dll

ntdll.dll

kernel32.dll

kernel32.dll

"%s" %s

"%s" %s

/c "%s"

/c "%s"

%sx.%s

%sx.%s

%sx

%sx

SELECT * FROM %s

SELECT * FROM %s

Company: %s

Company: %s

Product: %s

Product: %s

Version: %s

Version: %s

Software\Microsoft\Windows\CurrentVersion\Uninstall

Software\Microsoft\Windows\CurrentVersion\Uninstall

%u: %s | %s | %s

%u: %s | %s | %s

Global\XXX

Global\XXX

SysShadow

SysShadow

Chrome

Chrome

Firefox

Firefox

%Documents and Settings%\%current user%\Application Data

%Documents and Settings%\%current user%\Application Data

{E90C4A0B-BD46-7BBE-341D-3959D67D1D48}

{E90C4A0B-BD46-7BBE-341D-3959D67D1D48}

%Documents and Settings%\%current user%\Application Data\Tyawy\foed.qid

%Documents and Settings%\%current user%\Application Data\Tyawy\foed.qid

%Documents and Settings%\%current user%\Application Data\Tyawy

%Documents and Settings%\%current user%\Application Data\Tyawy

foed.qid

foed.qid

Global\{7F77F82E-0F63-EDC5-341D-3959D67D1D48}

Global\{7F77F82E-0F63-EDC5-341D-3959D67D1D48}

cry.exe_372_rwx_041E0000_0006C000:

t8It.IIt#

t8It.IIt#

.FGyO

.FGyO

FTPj

FTPj

YPSSSh

YPSSSh

9t$Lt.VV

9t$Lt.VV

,4,56,789

,4,56,789

GetProcessWindowStation

GetProcessWindowStation

3.7.13

3.7.13

SQLite format 3

SQLite format 3

CREATE TABLE sqlite_master(

CREATE TABLE sqlite_master(

sql text

sql text

CREATE TEMP TABLE sqlite_temp_master(

CREATE TEMP TABLE sqlite_temp_master(

REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY\

REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY\

-cmd command run "command" before reading stdin

-cmd command run "command" before reading stdin

-echo print commands before execution

-echo print commands before execution

-version show SQLite version

-version show SQLite version

%a, %d-%b-%Y %H:%M:%S GMT

%a, %d-%b-%Y %H:%M:%S GMT

isHttpOnly

isHttpOnly

HttpOnly=YES

HttpOnly=YES

HttpOnly=NO

HttpOnly=NO

SQLITE_

SQLITE_

d-d-d d:d:d

d-d-d d:d:d

d:d:d

d:d:d

d-d-d

d-d-d

failed to allocate %u bytes of memory

failed to allocate %u bytes of memory

failed memory resize %u to %u bytes

failed memory resize %u to %u bytes

922337203685477580

922337203685477580

API call with %s database connection pointer

API call with %s database connection pointer

RowKey

RowKey

GetProcessHeap

GetProcessHeap

OsError 0x%x (%u)

OsError 0x%x (%u)

os_win.c:%d: (%d) %s(%s) - %s

os_win.c:%d: (%d) %s(%s) - %s

delayed %dms for lock/sharing conflict

delayed %dms for lock/sharing conflict

%s-shm

%s-shm

%s\etilqs_

%s\etilqs_

%s\%s

%s\%s

Recovered %d frames from WAL file %s

Recovered %d frames from WAL file %s

cannot limit WAL size: %s

cannot limit WAL size: %s

invalid page number %d

invalid page number %d

2nd reference to page %d

2nd reference to page %d

Failed to read ptrmap key=%d

Failed to read ptrmap key=%d

Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)

Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)

%d of %d pages missing from overflow list starting at %d

%d of %d pages missing from overflow list starting at %d

failed to get page %d

failed to get page %d

freelist leaf count too big on page %d

freelist leaf count too big on page %d

Page %d:

Page %d:

unable to get the page. error code=%d

unable to get the page. error code=%d

btreeInitPage() returns error code %d

btreeInitPage() returns error code %d

On tree page %d cell %d:

On tree page %d cell %d:

On page %d at right child:

On page %d at right child:

Corruption detected in cell %d on page %d

Corruption detected in cell %d on page %d

Multiple uses for byte %d of page %d

Multiple uses for byte %d of page %d

Fragmentation of %d bytes reported as %d on page %d

Fragmentation of %d bytes reported as %d on page %d

Page %d is never used

Page %d is never used

Pointer map page %d is referenced

Pointer map page %d is referenced

Outstanding page count goes from %d to %d during this analysis

Outstanding page count goes from %d to %d during this analysis

unknown database %s

unknown database %s

keyinfo(%d

keyinfo(%d

%s(%d)

%s(%d)

%s-mjXXXXXX9XXz

%s-mjXXXXXX9XXz

MJ delete: %s

MJ delete: %s

MJ collide: %s

MJ collide: %s

-mjX9X

-mjX9X

foreign key constraint failed

foreign key constraint failed

unable to use function %s in the requested context

unable to use function %s in the requested context

bind on a busy prepared statement: [%s]

bind on a busy prepared statement: [%s]

zeroblob(%d)

zeroblob(%d)

abort at %d in [%s]: %s

abort at %d in [%s]: %s

constraint failed at %d in [%s]

constraint failed at %d in [%s]

cannot open savepoint - SQL statements in progress

cannot open savepoint - SQL statements in progress

no such savepoint: %s

no such savepoint: %s

cannot release savepoint - SQL statements in progress

cannot release savepoint - SQL statements in progress

cannot commit transaction - SQL statements in progress

cannot commit transaction - SQL statements in progress

sqlite_temp_master

sqlite_temp_master

sqlite_master

sqlite_master

SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid

SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid

cannot change %s wal mode from within a transaction

cannot change %s wal mode from within a transaction

database table is locked: %s

database table is locked: %s

statement aborts at %d: [%s] %s

statement aborts at %d: [%s] %s

cannot open value of type %s

cannot open value of type %s

cannot open virtual table: %s

cannot open virtual table: %s

cannot open view: %s

cannot open view: %s

no such column: "%s"

no such column: "%s"

foreign key

foreign key

indexed

indexed

cannot open %s column for writing

cannot open %s column for writing

misuse of aliased aggregate %s

misuse of aliased aggregate %s

%s: %s.%s.%s

%s: %s.%s.%s

%s: %s.%s

%s: %s.%s

%s: %s

%s: %s

not authorized to use function: %s

not authorized to use function: %s

%r %s BY term out of range - should be between 1 and %d

%r %s BY term out of range - should be between 1 and %d

too many terms in %s BY clause

too many terms in %s BY clause

Expression tree is too large (maximum depth %d)

Expression tree is too large (maximum depth %d)

variable number must be between ?1 and ?%d

variable number must be between ?1 and ?%d

too many SQL variables

too many SQL variables

too many columns in %s

too many columns in %s

EXECUTE %s%s SUBQUERY %d

EXECUTE %s%s SUBQUERY %d

misuse of aggregate: %s()

misuse of aggregate: %s()

%.*s"%w"%s

%.*s"%w"%s

%s%.*s"%w"

%s%.*s"%w"

sqlite_rename_table

sqlite_rename_table

sqlite_rename_trigger

sqlite_rename_trigger

sqlite_rename_parent

sqlite_rename_parent

%s OR name=%Q

%s OR name=%Q

type='trigger' AND (%s)

type='trigger' AND (%s)

sqlite_

sqlite_

table %s may not be altered

table %s may not be altered

there is already another table or index with this name: %s

there is already another table or index with this name: %s

view %s may not be altered

view %s may not be altered

UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;

UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;

sqlite_sequence

sqlite_sequence

UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q

UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q

UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');

UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');

UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;

UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;

Cannot add a PRIMARY KEY column

Cannot add a PRIMARY KEY column

UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q

UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q

sqlite_altertab_%s

sqlite_altertab_%s

sqlite_stat1

sqlite_stat1

CREATE TABLE %Q.%s(%s)

CREATE TABLE %Q.%s(%s)

DELETE FROM %Q.%s WHERE %s=%Q

DELETE FROM %Q.%s WHERE %s=%Q

SELECT tbl,idx,stat FROM %Q.sqlite_stat1

SELECT tbl,idx,stat FROM %Q.sqlite_stat1

invalid name: "%s"

invalid name: "%s"

too many attached databases - max %d

too many attached databases - max %d

database %s is already in use

database %s is already in use

unable to open database: %s

unable to open database: %s

no such database: %s

no such database: %s

cannot detach database %s

cannot detach database %s

database %s is locked

database %s is locked

sqlite_detach

sqlite_detach

sqlite_attach

sqlite_attach

%s %T cannot reference objects in database %s

%s %T cannot reference objects in database %s

access to %s.%s.%s is prohibited

access to %s.%s.%s is prohibited

access to %s.%s is prohibited

access to %s.%s is prohibited

object name reserved for internal use: %s

object name reserved for internal use: %s

there is already an index named %s

there is already an index named %s

too many columns on %s

too many columns on %s

duplicate column name: %s

duplicate column name: %s

default value of column [%s] is not constant

default value of column [%s] is not constant

table "%s" has more than one primary key

table "%s" has more than one primary key

AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY

AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY

no such collation sequence: %s

no such collation sequence: %s

CREATE %s %.*s

CREATE %s %.*s

UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d

UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d

CREATE TABLE %Q.sqlite_sequence(name,seq)

CREATE TABLE %Q.sqlite_sequence(name,seq)

view %s is circularly defined

view %s is circularly defined

UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d

UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d

sqlite_stat%d

sqlite_stat%d

DELETE FROM %Q.sqlite_sequence WHERE name=%Q

DELETE FROM %Q.sqlite_sequence WHERE name=%Q

DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'

DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'

sqlite_stat

sqlite_stat

table %s may not be dropped

table %s may not be dropped

use DROP TABLE to delete table %s

use DROP TABLE to delete table %s

use DROP VIEW to delete view %s

use DROP VIEW to delete view %s

foreign key on %s should reference only one column of table %T

foreign key on %s should reference only one column of table %T

number of columns in foreign key does not match the number of columns in the referenced table

number of columns in foreign key does not match the number of columns in the referenced table

unknown column "%s" in foreign key definition

unknown column "%s" in foreign key definition

indexed columns are not unique

indexed columns are not unique

table %s may not be indexed

table %s may not be indexed

views may not be indexed

views may not be indexed

virtual tables may not be indexed

virtual tables may not be indexed

there is already a table named %s

there is already a table named %s

index %s already exists

index %s already exists

sqlite_autoindex_%s_%d

sqlite_autoindex_%s_%d

table %s has no column named %s

table %s has no column named %s

CREATE%s INDEX %.*s

CREATE%s INDEX %.*s

INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);

INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);

no such index: %S

no such index: %S

index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped

index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped

DELETE FROM %Q.%s WHERE name=%Q AND type='index'

DELETE FROM %Q.%s WHERE name=%Q AND type='index'

a JOIN clause is required before %s

a JOIN clause is required before %s

unable to identify the object to be reindexed

unable to identify the object to be reindexed

table %s may not be modified

table %s may not be modified

cannot modify %s because it is a view

cannot modify %s because it is a view

sqlite_version

sqlite_version

sqlite_source_id

sqlite_source_id

sqlite_log

sqlite_log

sqlite_compileoption_used

sqlite_compileoption_used

sqlite_compileoption_get

sqlite_compileoption_get

foreign key mismatch

foreign key mismatch

table %S has %d columns but %d values were supplied

table %S has %d columns but %d values were supplied

%d values for %d columns

%d values for %d columns

table %S has no column named %s

table %S has no column named %s

%s.%s may not be NULL

%s.%s may not be NULL

constraint %s failed

constraint %s failed

PRIMARY KEY must be unique

PRIMARY KEY must be unique

sqlite3_extension_init

sqlite3_extension_init

unable to open shared library [%s]

unable to open shared library [%s]

no entry point [%s] in shared library [%s]

no entry point [%s] in shared library [%s]

error during initialization: %s

error during initialization: %s

automatic extension loading failed: %s

automatic extension loading failed: %s

foreign_keys

foreign_keys

foreign_key_list

foreign_key_list

*** in database %s ***

*** in database %s ***

unsupported encoding: %s

unsupported encoding: %s

malformed database schema (%s)

malformed database schema (%s)

%s - %s

%s - %s

unsupported file format

unsupported file format

SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid

SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid

database schema is locked: %s

database schema is locked: %s

unknown or unsupported join type: %T %T%s%T

unknown or unsupported join type: %T %T%s%T

RIGHT and FULL OUTER JOINs are not currently supported

RIGHT and FULL OUTER JOINs are not currently supported

a NATURAL join may not have an ON or USING clause

a NATURAL join may not have an ON or USING clause

cannot have both ON and USING clauses in the same join

cannot have both ON and USING clauses in the same join

cannot join using column %s - column not present in both tables

cannot join using column %s - column not present in both tables

USE TEMP B-TREE FOR %s

USE TEMP B-TREE FOR %s

COMPOUND SUBQUERIES %d AND %d %s(%s)

COMPOUND SUBQUERIES %d AND %d %s(%s)

%s.%s

%s.%s

%s:%d

%s:%d

ORDER BY clause should come after %s not before

ORDER BY clause should come after %s not before

LIMIT clause should come after %s not before

LIMIT clause should come after %s not before

SELECTs to the left and right of %s do not have the same number of result columns

SELECTs to the left and right of %s do not have the same number of result columns

no such index: %s

no such index: %s

sqlite_subquery_%p_

sqlite_subquery_%p_

no such table: %s

no such table: %s

SCAN TABLE %s %s%s(~%d rows)

SCAN TABLE %s %s%s(~%d rows)

sqlite3_get_table() called with two or more incompatible queries

sqlite3_get_table() called with two or more incompatible queries

cannot create %s trigger on view: %S

cannot create %s trigger on view: %S

cannot create INSTEAD OF trigger on table: %S

cannot create INSTEAD OF trigger on table: %S

INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')

INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')

no such trigger: %S

no such trigger: %S

-- TRIGGER %s

-- TRIGGER %s

no such column: %s

no such column: %s

cannot VACUUM - SQL statements in progress

cannot VACUUM - SQL statements in progress

PRAGMA vacuum_db.synchronous=OFF

PRAGMA vacuum_db.synchronous=OFF

SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'

SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'

SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'

SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';

INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)

INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)

UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d

UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d

vtable constructor failed: %s

vtable constructor failed: %s

vtable constructor did not declare schema: %s

vtable constructor did not declare schema: %s

no such module: %s

no such module: %s

table %s: xBestIndex returned an invalid plan

table %s: xBestIndex returned an invalid plan

%s SUBQUERY %d

%s SUBQUERY %d

%s TABLE %s

%s TABLE %s

%s AS %s

%s AS %s

%s USING %s%sINDEX%s%s%s

%s USING %s%sINDEX%s%s%s

%s USING INTEGER PRIMARY KEY

%s USING INTEGER PRIMARY KEY

%s (rowid=?)

%s (rowid=?)

%s (rowid>? AND rowid)

%s (rowid>? AND rowid)

%s (rowid>?)

%s (rowid>?)

%s (rowid)

%s (rowid)

%s VIRTUAL TABLE INDEX %d:%s

%s VIRTUAL TABLE INDEX %d:%s

%s (~%lld rows)

%s (~%lld rows)

at most %d tables in a join

at most %d tables in a join

cannot use index: %s

cannot use index: %s

the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers

the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers

the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers

the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers

unable to close due to unfinished backup operation

unable to close due to unfinished backup operation

SQL logic error or missing database

SQL logic error or missing database

unknown operation

unknown operation

large file support is disabled

large file support is disabled

unknown database: %s

unknown database: %s

no such %s mode: %s

no such %s mode: %s

%s mode not allowed: %s

%s mode not allowed: %s

no such vfs: %s

no such vfs: %s

database corruption at line %d of [%.10s]

database corruption at line %d of [%.10s]

misuse at line %d of [%.10s]

misuse at line %d of [%.10s]

cannot open file at line %d of [%.10s]

cannot open file at line %d of [%.10s]

CPU Time: user %f sys %f

CPU Time: user %f sys %f

(%d) %s

(%d) %s

%*s = %s

%*s = %s

%-*.*s%s

%-*.*s%s

INSERT INTO %s VALUES(

INSERT INTO %s VALUES(

%sNULL

%sNULL

/**** ERROR: (%d) %s *****/

/**** ERROR: (%d) %s *****/

Memory Used: %d (max %d) bytes

Memory Used: %d (max %d) bytes

Number of Outstanding Allocations: %d (max %d)

Number of Outstanding Allocations: %d (max %d)

Number of Pcache Overflow Bytes: %d (max %d) bytes

Number of Pcache Overflow Bytes: %d (max %d) bytes

Number of Scratch Overflow Bytes: %d (max %d) bytes

Number of Scratch Overflow Bytes: %d (max %d) bytes

Largest Allocation: %d bytes

Largest Allocation: %d bytes

Largest Pcache Allocation: %d bytes

Largest Pcache Allocation: %d bytes

Largest Scratch Allocation: %d bytes

Largest Scratch Allocation: %d bytes

Lookaside Slots Used: %d (max %d)

Lookaside Slots Used: %d (max %d)

Successful lookaside attempts: %d

Successful lookaside attempts: %d

Lookaside failures due to size: %d

Lookaside failures due to size: %d

Lookaside failures due to OOM: %d

Lookaside failures due to OOM: %d

Pager Heap Usage: %d bytes

Pager Heap Usage: %d bytes

Page cache hits: %d

Page cache hits: %d

Page cache misses: %d

Page cache misses: %d

Page cache writes: %d

Page cache writes: %d

Schema Heap Usage: %d bytes

Schema Heap Usage: %d bytes

Statement Heap/Lookaside Usage: %d bytes

Statement Heap/Lookaside Usage: %d bytes

Fullscan Steps: %d

Fullscan Steps: %d

Sort Operations: %d

Sort Operations: %d

Autoindex Inserts: %d

Autoindex Inserts: %d

DELETE FROM sqlite_sequence;

DELETE FROM sqlite_sequence;

ANALYZE sqlite_master;

ANALYZE sqlite_master;

INSERT INTO sqlite_master(type,name,tbl_name,rootpage,sql)VALUES('table','%q','%q',0,'%q');

INSERT INTO sqlite_master(type,name,tbl_name,rootpage,sql)VALUES('table','%q','%q',0,'%q');

/****** %s ******/

/****** %s ******/

%s ORDER BY rowid DESC

%s ORDER BY rowid DESC

/****** ERROR: %s ******/

/****** ERROR: %s ******/

.backup ?DB? FILE Backup DB (default "main") to FILE

.backup ?DB? FILE Backup DB (default "main") to FILE

.bail ON|OFF Stop after hitting an error. Default OFF

.bail ON|OFF Stop after hitting an error. Default OFF

.databases List names and files of attached databases

.databases List names and files of attached databases

.dump ?TABLE? ... Dump the database in an SQL text format

.dump ?TABLE? ... Dump the database in an SQL text format

.echo ON|OFF Turn command echo on or off

.echo ON|OFF Turn command echo on or off

.exit Exit this program

.exit Exit this program

.explain ?ON|OFF? Turn output mode suitable for EXPLAIN on or off.

.explain ?ON|OFF? Turn output mode suitable for EXPLAIN on or off.

.header(s) ON|OFF Turn display of headers on or off

.header(s) ON|OFF Turn display of headers on or off

.help Show this message

.help Show this message

.import FILE TABLE Import data from FILE into TABLE

.import FILE TABLE Import data from FILE into TABLE

.indices ?TABLE? Show names of all indices

.indices ?TABLE? Show names of all indices

.load FILE ?ENTRY? Load an extension library

.load FILE ?ENTRY? Load an extension library

.log FILE|off Turn logging on or off. FILE can be stderr/stdout

.log FILE|off Turn logging on or off. FILE can be stderr/stdout

.mode MODE ?TABLE? Set output mode where MODE is one of:

.mode MODE ?TABLE? Set output mode where MODE is one of:

column Left-aligned columns. (See .width)

column Left-aligned columns. (See .width)

insert SQL insert statements for TABLE

insert SQL insert statements for TABLE

list Values delimited by .separator string

list Values delimited by .separator string

.nullvalue STRING Print STRING in place of NULL values

.nullvalue STRING Print STRING in place of NULL values

.output FILENAME Send output to FILENAME

.output FILENAME Send output to FILENAME

.output stdout Send output to the screen

.output stdout Send output to the screen

.prompt MAIN CONTINUE Replace the standard prompts

.prompt MAIN CONTINUE Replace the standard prompts

.quit Exit this program

.quit Exit this program

.read FILENAME Execute SQL in FILENAME

.read FILENAME Execute SQL in FILENAME

.restore ?DB? FILE Restore content of DB (default "main") from FILE

.restore ?DB? FILE Restore content of DB (default "main") from FILE

.schema ?TABLE? Show the CREATE statements

.schema ?TABLE? Show the CREATE statements

.separator STRING Change separator used by output mode and .import

.separator STRING Change separator used by output mode and .import

.show Show the current values for various settings

.show Show the current values for various settings

.stats ON|OFF Turn stats on or off

.stats ON|OFF Turn stats on or off

.tables ?TABLE? List names of tables

.tables ?TABLE? List names of tables

.timeout MS Try opening locked tables for MS milliseconds

.timeout MS Try opening locked tables for MS milliseconds

.trace FILE|off Output each SQL statement as it is run

.trace FILE|off Output each SQL statement as it is run

.vfsname ?AUX? Print the name of the VFS stack

.vfsname ?AUX? Print the name of the VFS stack

.width NUM1 NUM2 ... Set column widths for "column" mode

.width NUM1 NUM2 ... Set column widths for "column" mode

.timer ON|OFF Turn the CPU timer measurement on or off

.timer ON|OFF Turn the CPU timer measurement on or off

Error: unable to open database "%s": %s

Error: unable to open database "%s": %s

Error: cannot open "%s"

Error: cannot open "%s"

Error: %s

Error: %s

PRAGMA foreign_keys=OFF;

PRAGMA foreign_keys=OFF;

SELECT name, type, sql FROM sqlite_master WHERE sql NOT NULL AND type=='table' AND name!='sqlite_sequence'

SELECT name, type, sql FROM sqlite_master WHERE sql NOT NULL AND type=='table' AND name!='sqlite_sequence'

SELECT name, type, sql FROM sqlite_master WHERE name=='sqlite_sequence'

SELECT name, type, sql FROM sqlite_master WHERE name=='sqlite_sequence'

SELECT sql FROM sqlite_master WHERE sql NOT NULL AND type IN ('index','trigger','view')

SELECT sql FROM sqlite_master WHERE sql NOT NULL AND type IN ('index','trigger','view')

SELECT name, type, sql FROM sqlite_master WHERE tbl_name LIKE shellstatic() AND type=='table' AND sql NOT NULL

SELECT name, type, sql FROM sqlite_master WHERE tbl_name LIKE shellstatic() AND type=='table' AND sql NOT NULL

SELECT sql FROM sqlite_master WHERE sql NOT NULL AND type IN ('index','trigger','view') AND tbl_name LIKE shellstatic()

SELECT sql FROM sqlite_master WHERE sql NOT NULL AND type IN ('index','trigger','view') AND tbl_name LIKE shellstatic()

import

import

Error: non-null separator required for import

Error: non-null separator required for import

SELECT * FROM %s

SELECT * FROM %s

INSERT INTO %s VALUES(?

INSERT INTO %s VALUES(?

Error: %s line %d: expected %d columns of data but found %d

Error: %s line %d: expected %d columns of data but found %d

SELECT name FROM sqlite_master WHERE type='index' AND name NOT LIKE 'sqlite_%' UNION ALL SELECT name FROM sqlite_temp_master WHERE type='index' ORDER BY 1

SELECT name FROM sqlite_master WHERE type='index' AND name NOT LIKE 'sqlite_%' UNION ALL SELECT name FROM sqlite_temp_master WHERE type='index' ORDER BY 1

SELECT name FROM sqlite_master WHERE type='index' AND tbl_name LIKE shellstatic() UNION ALL SELECT name FROM sqlite_temp_master WHERE type='index' AND tbl_name LIKE shellstatic() ORDER BY 1

SELECT name FROM sqlite_master WHERE type='index' AND tbl_name LIKE shellstatic() UNION ALL SELECT name FROM sqlite_temp_master WHERE type='index' AND tbl_name LIKE shellstatic() ORDER BY 1

Error: querying sqlite_master and sqlite_temp_master

Error: querying sqlite_master and sqlite_temp_master

Error: invalid arguments: "%s". Enter ".help" for help

Error: invalid arguments: "%s". Enter ".help" for help

Error: cannot open pipe "%s"

Error: cannot open pipe "%s"

Error: cannot write to "%s"

Error: cannot write to "%s"

CREATE TABLE sqlite_master (

CREATE TABLE sqlite_master (

CREATE TEMP TABLE sqlite_temp_master (

CREATE TEMP TABLE sqlite_temp_master (

SELECT sql FROM (SELECT sql sql, type type, tbl_name tbl_name, name name, rowid x FROM sqlite_master UNION ALL SELECT sql, type, tbl_name, name, rowid FROM sqlite_temp_master) WHERE lower(tbl_name) LIKE shellstatic() AND type!='meta' AND sql NOTNULL ORDER BY substr(type,2,1), CASE type WHEN 'view' THEN rowid ELSE name END

SELECT sql FROM (SELECT sql sql, type type, tbl_name tbl_name, name name, rowid x FROM sqlite_master UNION ALL SELECT sql, type, tbl_name, name, rowid FROM sqlite_temp_master) WHERE lower(tbl_name) LIKE shellstatic() AND type!='meta' AND sql NOTNULL ORDER BY substr(type,2,1), CASE type WHEN 'view' THEN rowid ELSE name END

SELECT sql FROM (SELECT sql sql, type type, tbl_name tbl_name, name name, rowid x FROM sqlite_master UNION ALL SELECT sql, type, tbl_name, name, rowid FROM sqlite_temp_master) WHERE type!='meta' AND sql NOTNULL AND name NOT LIKE 'sqlite_%'ORDER BY substr(type,2,1), CASE type WHEN 'view' THEN rowid ELSE name END

SELECT sql FROM (SELECT sql sql, type type, tbl_name tbl_name, name name, rowid x FROM sqlite_master UNION ALL SELECT sql, type, tbl_name, name, rowid FROM sqlite_temp_master) WHERE type!='meta' AND sql NOTNULL AND name NOT LIKE 'sqlite_%'ORDER BY substr(type,2,1), CASE type WHEN 'view' THEN rowid ELSE name END

%9.9s: %s

%9.9s: %s

SELECT name FROM sqlite_master WHERE type IN ('table','view') AND name NOT LIKE 'sqlite_%%' AND name LIKE ?1

SELECT name FROM sqlite_master WHERE type IN ('table','view') AND name NOT LIKE 'sqlite_%%' AND name LIKE ?1

%z UNION ALL SELECT 'temp.' || name FROM sqlite_temp_master WHERE type IN ('table','view') AND name NOT LIKE 'sqlite_%%' AND name LIKE ?1

%z UNION ALL SELECT 'temp.' || name FROM sqlite_temp_master WHERE type IN ('table','view') AND name NOT LIKE 'sqlite_%%' AND name LIKE ?1

%z UNION ALL SELECT '%q.' || name FROM "%w".sqlite_master WHERE type IN ('table','view') AND name NOT LIKE 'sqlite_%%' AND name LIKE ?1

%z UNION ALL SELECT '%q.' || name FROM "%w".sqlite_master WHERE type IN ('table','view') AND name NOT LIKE 'sqlite_%%' AND name LIKE ?1

%s%-*s

%s%-*s

iskeyword

iskeyword

ambiguous option name: "%s"

ambiguous option name: "%s"

Error: invalid testctrl option: %s

Error: invalid testctrl option: %s

%d (0xx)

%d (0xx)

Error: testctrl %s takes a single int option

Error: testctrl %s takes a single int option

Error: testctrl %s takes no options

Error: testctrl %s takes no options

Error: testctrl %s takes a single unsigned int option

Error: testctrl %s takes a single unsigned int option

Error: CLI support for testctrl %s not implemented

Error: CLI support for testctrl %s not implemented

SQLite %s %s

SQLite %s %s

Error: unknown command or invalid arguments: "%s". Enter ".help" for help

Error: unknown command or invalid arguments: "%s". Enter ".help" for help

Error: near line %d:

Error: near line %d:

%s %s

%s %s

Error: incomplete SQL: %s

Error: incomplete SQL: %s

%s: Error: cannot locate your home directory

%s: Error: cannot locate your home directory

%s/.sqliterc

%s/.sqliterc

-- Loading resources from %s

-- Loading resources from %s

Usage: %s [OPTIONS] FILENAME [SQL]

Usage: %s [OPTIONS] FILENAME [SQL]

FILENAME is the name of an SQLite database. A new database is created

FILENAME is the name of an SQLite database. A new database is created

sqlite>

sqlite>

SQLite header and source version mismatch

SQLite header and source version mismatch

no such VFS: "%s"

no such VFS: "%s"

%s: Error: too many options: "%s"

%s: Error: too many options: "%s"

%s: Error: missing argument for option: %s

%s: Error: missing argument for option: %s

Error: unable to process SQL "%s"

Error: unable to process SQL "%s"

%s: Error: unknown option: %s

%s: Error: unknown option: %s

%s/.sqlite_history

%s/.sqlite_history

SQLite version %s %.19s

SQLite version %s %.19s

Enter ".help" for instructions

Enter ".help" for instructions

Enter SQL statements terminated with a ";"

Enter SQL statements terminated with a ";"

zcÁ

zcÁ

O{%Documents and Settings%\%current user%\Application Data\cry.exe

O{%Documents and Settings%\%current user%\Application Data\cry.exe

GetCPInfo

GetCPInfo

]

]

.text

.text

`.rdata

`.rdata

@.data

@.data

.reloc

.reloc

KERNEL32.DLL

KERNEL32.DLL

ole32.dll

ole32.dll

ffcookieextractor.dll

ffcookieextractor.dll

_getFirefoxCookie

_getFirefoxCookie

mscoree.dll

mscoree.dll

nKERNEL32.DLL

nKERNEL32.DLL

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

- floating point support not loaded

- floating point support not loaded

WUSER32.DLL

WUSER32.DLL

888816666554443

888816666554443

6666554443

6666554443

!6666554443

!6666554443

%AppData%\Mozilla\Firefox

%AppData%\Mozilla\Firefox

\profiles.ini

\profiles.ini

\cookies.sqlite

\cookies.sqlite

Kernel32.dll

Kernel32.dll

cry.exe_372_rwx_675A6000_00003000:

.Qg

.Qg

*Rg`.Rg|)RgL Rg

*Rg`.Rg|)RgL Rg

crys.exe_1460_rwx_012B0000_0003B000:

.text

.text

`.data

`.data

.reloc

.reloc

%s, u %s %u u:u:u GMT

%s, u %s %u u:u:u GMT

HTTP/1.1

HTTP/1.1

HTTP/1.0

HTTP/1.0

hXXp://

hXXp://

; charset=%s

; charset=%s

HTTP/1.1 %u %s

HTTP/1.1 %u %s

Date: %s

Date: %s

Content-Length: %u

Content-Length: %u

Expires: %s

Expires: %s

Content-Type: %s%s

Content-Type: %s%s

ID: %s

ID: %s

value_%s

value_%s

value_%s_%s

value_%s_%s

%s = "%s";

%s = "%s";

update.exe

update.exe

config.bin

config.bin

PR_OpenTCPSocket

PR_OpenTCPSocket

cit_ffcookie.module

cit_ffcookie.module

cit_video.module

cit_video.module

%ds~U;MM

%ds~U;MM

userenv.dll

userenv.dll

del "%s"

del "%s"

if exist "%s" goto d

if exist "%s" goto d

del /F "%s"

del /F "%s"

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1)

urlmon.dll

urlmon.dll

cabinet.dll

cabinet.dll

hXXp://xxxxxxxx.com/xxxx/xxxx.php

hXXp://xxxxxxxx.com/xxxx/xxxx.php

%s%s%s

%s%s%s

gdiplus.dll

gdiplus.dll

GdiplusShutdown

GdiplusShutdown

ole32.dll

ole32.dll

gdi32.dll

gdi32.dll

6;:5;66"

6;:5;66"

,1;(,; = 1

,1;(,; = 1

'472%9,{

'472%9,{

F@ICTQ}cRTWAunO}mmts}NX~csgzn~)[jzyemer\]ika

F@ICTQ}cRTWAunO}mmts}NX~csgzn~)[jzyemer\]ika

8/3.xae4LOa

8/3.xae4LOa

6 !26!1'1!

6 !26!1'1!

hXXps://

hXXps://

HTTP/1.

HTTP/1.

facebook.com

facebook.com

Cookie: %s

Cookie: %s

Referer: %s

Referer: %s

Accept: %s

Accept: %s

Accept-Language: %s

Accept-Language: %s

Accept-Encoding: %s

Accept-Encoding: %s

_getFirefoxCookie

_getFirefoxCookie

hXXp://VVV.google.com/webhp

hXXp://VVV.google.com/webhp

SSShD

SSShD

SSShXe,

SSShXe,

SSShye,

SSShye,

GetProcessHeap

GetProcessHeap

CreatePipe

CreatePipe

KERNEL32.dll

KERNEL32.dll

MsgWaitForMultipleObjects

MsgWaitForMultipleObjects

OpenWindowStationW

OpenWindowStationW

GetProcessWindowStation

GetProcessWindowStation

CreateWindowStationW

CreateWindowStationW

CloseWindowStation

CloseWindowStation

SetProcessWindowStation

SetProcessWindowStation

SetKeyboardState

SetKeyboardState

ExitWindowsEx

ExitWindowsEx

GetKeyboardState

GetKeyboardState

MapVirtualKeyW

MapVirtualKeyW

GetKeyboardLayoutList

GetKeyboardLayoutList

USER32.dll

USER32.dll

RegCreateKeyExW

RegCreateKeyExW

RegOpenKeyExW

RegOpenKeyExW

RegCloseKey

RegCloseKey

RegCreateKeyW

RegCreateKeyW

RegEnumKeyW

RegEnumKeyW

RegQueryInfoKeyW

RegQueryInfoKeyW

RegEnumKeyExW

RegEnumKeyExW

ADVAPI32.dll

ADVAPI32.dll

UrlUnescapeA

UrlUnescapeA

SHDeleteKeyW

SHDeleteKeyW

PathIsURLW

PathIsURLW

SHLWAPI.dll

SHLWAPI.dll

ShellExecuteW

ShellExecuteW

SHELL32.dll

SHELL32.dll

Secur32.dll

Secur32.dll

SetViewportOrgEx

SetViewportOrgEx

GDI32.dll

GDI32.dll

WS2_32.dll

WS2_32.dll

PFXImportCertStore

PFXImportCertStore

CertDeleteCertificateFromStore

CertDeleteCertificateFromStore

CertOpenSystemStoreW

CertOpenSystemStoreW

CertCloseStore

CertCloseStore

CertEnumCertificatesInStore

CertEnumCertificatesInStore

CertDuplicateCertificateContext

CertDuplicateCertificateContext

PFXExportCertStoreEx

PFXExportCertStoreEx

CRYPT32.dll

CRYPT32.dll

HttpSendRequestExA

HttpSendRequestExA

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestExW

HttpSendRequestExW

HttpSendRequestW

HttpSendRequestW

HttpOpenRequestA

HttpOpenRequestA

HttpOpenRequestW

HttpOpenRequestW

HttpEndRequestA

HttpEndRequestA

HttpSendRequestA

HttpSendRequestA

HttpEndRequestW

HttpEndRequestW

InternetCrackUrlA

InternetCrackUrlA

HttpAddRequestHeadersW

HttpAddRequestHeadersW

GetUrlCacheEntryInfoW

GetUrlCacheEntryInfoW

HttpAddRequestHeadersA

HttpAddRequestHeadersA

WININET.dll

WININET.dll

OLEAUT32.dll

OLEAUT32.dll

NETAPI32.dll

NETAPI32.dll

VERSION.dll

VERSION.dll

WINMM.dll

WINMM.dll

PSSSSSSh

PSSSSSSh

3$3*30383

3$3*30383

6|7k7u7

6|7k7u7

9 :1:::@:

9 :1:::@:

42>204:4

42>204:4

sXXXX

sXXXX

nspr4.dll

nspr4.dll

chrome.dll

chrome.dll

\StringFileInfo\xx\%s

\StringFileInfo\xx\%s

ntdll.dll

ntdll.dll

kernel32.dll

kernel32.dll

"%s" %s

"%s" %s

/c "%s"

/c "%s"

%sx.%s

%sx.%s

%sx

%sx

SELECT * FROM %s

SELECT * FROM %s

Company: %s

Company: %s

Product: %s

Product: %s

Version: %s

Version: %s

Software\Microsoft\Windows\CurrentVersion\Uninstall

Software\Microsoft\Windows\CurrentVersion\Uninstall

%u: %s | %s | %s

%u: %s | %s | %s

Global\XXX

Global\XXX

SysShadow

SysShadow

Chrome

Chrome

Firefox

Firefox

%Documents and Settings%\%current user%\Application Data

%Documents and Settings%\%current user%\Application Data

{E90C4A0B-BD46-7BBE-341D-3959D67D1D48}

{E90C4A0B-BD46-7BBE-341D-3959D67D1D48}

%Documents and Settings%\%current user%\Application Data\Tyawy\foed.qid

%Documents and Settings%\%current user%\Application Data\Tyawy\foed.qid

%Documents and Settings%\%current user%\Application Data\Tyawy

%Documents and Settings%\%current user%\Application Data\Tyawy

foed.qid

foed.qid

Global\{7F77F82E-0F63-EDC5-341D-3959D67D1D48}

Global\{7F77F82E-0F63-EDC5-341D-3959D67D1D48}

crys.exe_1460_rwx_037E0000_0006C000:

t8It.IIt#

t8It.IIt#

.FGyO

.FGyO

FTPj

FTPj

YPSSSh

YPSSSh

9t$Lt.VV

9t$Lt.VV

,4,56,789

,4,56,789

GetProcessWindowStation

GetProcessWindowStation

3.7.13

3.7.13

SQLite format 3

SQLite format 3

CREATE TABLE sqlite_master(

CREATE TABLE sqlite_master(

sql text

sql text

CREATE TEMP TABLE sqlite_temp_master(

CREATE TEMP TABLE sqlite_temp_master(

REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY\

REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY\

-cmd command run "command" before reading stdin

-cmd command run "command" before reading stdin

-echo print commands before execution

-echo print commands before execution

-version show SQLite version

-version show SQLite version

%a, %d-%b-%Y %H:%M:%S GMT

%a, %d-%b-%Y %H:%M:%S GMT

isHttpOnly

isHttpOnly

HttpOnly=YES

HttpOnly=YES

HttpOnly=NO

HttpOnly=NO

SQLITE_

SQLITE_

d-d-d d:d:d

d-d-d d:d:d

d:d:d

d:d:d

d-d-d

d-d-d

failed to allocate %u bytes of memory

failed to allocate %u bytes of memory

failed memory resize %u to %u bytes

failed memory resize %u to %u bytes

922337203685477580

922337203685477580

API call with %s database connection pointer

API call with %s database connection pointer

RowKey

RowKey

GetProcessHeap

GetProcessHeap

OsError 0x%x (%u)

OsError 0x%x (%u)

os_win.c:%d: (%d) %s(%s) - %s

os_win.c:%d: (%d) %s(%s) - %s

delayed %dms for lock/sharing conflict

delayed %dms for lock/sharing conflict

%s-shm

%s-shm

%s\etilqs_

%s\etilqs_

%s\%s

%s\%s

Recovered %d frames from WAL file %s

Recovered %d frames from WAL file %s

cannot limit WAL size: %s

cannot limit WAL size: %s

invalid page number %d

invalid page number %d

2nd reference to page %d

2nd reference to page %d

Failed to read ptrmap key=%d

Failed to read ptrmap key=%d

Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)

Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)

%d of %d pages missing from overflow list starting at %d

%d of %d pages missing from overflow list starting at %d

failed to get page %d

failed to get page %d

freelist leaf count too big on page %d

freelist leaf count too big on page %d

Page %d:

Page %d:

unable to get the page. error code=%d

unable to get the page. error code=%d

btreeInitPage() returns error code %d

btreeInitPage() returns error code %d

On tree page %d cell %d:

On tree page %d cell %d:

On page %d at right child:

On page %d at right child:

Corruption detected in cell %d on page %d

Corruption detected in cell %d on page %d

Multiple uses for byte %d of page %d

Multiple uses for byte %d of page %d

Fragmentation of %d bytes reported as %d on page %d

Fragmentation of %d bytes reported as %d on page %d

Page %d is never used

Page %d is never used

Pointer map page %d is referenced

Pointer map page %d is referenced

Outstanding page count goes from %d to %d during this analysis

Outstanding page count goes from %d to %d during this analysis

unknown database %s

unknown database %s

keyinfo(%d

keyinfo(%d

%s(%d)

%s(%d)

%s-mjXXXXXX9XXz

%s-mjXXXXXX9XXz

MJ delete: %s

MJ delete: %s

MJ collide: %s

MJ collide: %s

-mjX9X

-mjX9X

foreign key constraint failed

foreign key constraint failed

unable to use function %s in the requested context

unable to use function %s in the requested context

bind on a busy prepared statement: [%s]

bind on a busy prepared statement: [%s]

zeroblob(%d)

zeroblob(%d)

abort at %d in [%s]: %s

abort at %d in [%s]: %s

constraint failed at %d in [%s]

constraint failed at %d in [%s]

cannot open savepoint - SQL statements in progress

cannot open savepoint - SQL statements in progress

no such savepoint: %s

no such savepoint: %s

cannot release savepoint - SQL statements in progress

cannot release savepoint - SQL statements in progress

cannot commit transaction - SQL statements in progress

cannot commit transaction - SQL statements in progress

sqlite_temp_master

sqlite_temp_master

sqlite_master

sqlite_master

SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid

SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid

cannot change %s wal mode from within a transaction

cannot change %s wal mode from within a transaction

database table is locked: %s

database table is locked: %s

statement aborts at %d: [%s] %s

statement aborts at %d: [%s] %s

cannot open value of type %s

cannot open value of type %s

cannot open virtual table: %s

cannot open virtual table: %s

cannot open view: %s

cannot open view: %s

no such column: "%s"

no such column: "%s"

foreign key

foreign key

indexed

indexed

cannot open %s column for writing

cannot open %s column for writing

misuse of aliased aggregate %s

misuse of aliased aggregate %s

%s: %s.%s.%s

%s: %s.%s.%s

%s: %s.%s

%s: %s.%s

%s: %s

%s: %s

not authorized to use function: %s

not authorized to use function: %s

%r %s BY term out of range - should be between 1 and %d

%r %s BY term out of range - should be between 1 and %d

too many terms in %s BY clause

too many terms in %s BY clause

Expression tree is too large (maximum depth %d)

Expression tree is too large (maximum depth %d)

variable number must be between ?1 and ?%d

variable number must be between ?1 and ?%d

too many SQL variables

too many SQL variables

too many columns in %s

too many columns in %s

EXECUTE %s%s SUBQUERY %d

EXECUTE %s%s SUBQUERY %d

misuse of aggregate: %s()

misuse of aggregate: %s()

%.*s"%w"%s

%.*s"%w"%s

%s%.*s"%w"

%s%.*s"%w"

sqlite_rename_table

sqlite_rename_table

sqlite_rename_trigger

sqlite_rename_trigger

sqlite_rename_parent

sqlite_rename_parent

%s OR name=%Q

%s OR name=%Q

type='trigger' AND (%s)

type='trigger' AND (%s)

sqlite_

sqlite_

table %s may not be altered

table %s may not be altered

there is already another table or index with this name: %s

there is already another table or index with this name: %s

view %s may not be altered

view %s may not be altered

UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;

UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;

sqlite_sequence

sqlite_sequence

UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q

UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q

UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');

UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');

UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;

UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;

Cannot add a PRIMARY KEY column

Cannot add a PRIMARY KEY column

UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q

UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q

sqlite_altertab_%s

sqlite_altertab_%s

sqlite_stat1

sqlite_stat1

CREATE TABLE %Q.%s(%s)

CREATE TABLE %Q.%s(%s)

DELETE FROM %Q.%s WHERE %s=%Q

DELETE FROM %Q.%s WHERE %s=%Q

SELECT tbl,idx,stat FROM %Q.sqlite_stat1

SELECT tbl,idx,stat FROM %Q.sqlite_stat1

invalid name: "%s"

invalid name: "%s"

too many attached databases - max %d

too many attached databases - max %d

database %s is already in use

database %s is already in use

unable to open database: %s

unable to open database: %s

no such database: %s

no such database: %s

cannot detach database %s

cannot detach database %s

database %s is locked

database %s is locked

sqlite_detach

sqlite_detach

sqlite_attach

sqlite_attach

%s %T cannot reference objects in database %s

%s %T cannot reference objects in database %s

access to %s.%s.%s is prohibited

access to %s.%s.%s is prohibited

access to %s.%s is prohibited

access to %s.%s is prohibited

object name reserved for internal use: %s

object name reserved for internal use: %s

there is already an index named %s

there is already an index named %s

too many columns on %s

too many columns on %s

duplicate column name: %s

duplicate column name: %s

default value of column [%s] is not constant

default value of column [%s] is not constant

table "%s" has more than one primary key

table "%s" has more than one primary key

AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY

AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY

no such collation sequence: %s

no such collation sequence: %s

CREATE %s %.*s

CREATE %s %.*s

UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d

UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d

CREATE TABLE %Q.sqlite_sequence(name,seq)

CREATE TABLE %Q.sqlite_sequence(name,seq)

view %s is circularly defined

view %s is circularly defined

UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d

UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d

sqlite_stat%d

sqlite_stat%d

DELETE FROM %Q.sqlite_sequence WHERE name=%Q

DELETE FROM %Q.sqlite_sequence WHERE name=%Q

DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'

DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'

sqlite_stat

sqlite_stat

table %s may not be dropped

table %s may not be dropped

use DROP TABLE to delete table %s

use DROP TABLE to delete table %s

use DROP VIEW to delete view %s

use DROP VIEW to delete view %s

foreign key on %s should reference only one column of table %T

foreign key on %s should reference only one column of table %T

number of columns in foreign key does not match the number of columns in the referenced table

number of columns in foreign key does not match the number of columns in the referenced table

unknown column "%s" in foreign key definition

unknown column "%s" in foreign key definition

indexed columns are not unique

indexed columns are not unique

table %s may not be indexed

table %s may not be indexed

views may not be indexed

views may not be indexed

virtual tables may not be indexed

virtual tables may not be indexed

there is already a table named %s

there is already a table named %s

index %s already exists

index %s already exists

sqlite_autoindex_%s_%d

sqlite_autoindex_%s_%d

table %s has no column named %s

table %s has no column named %s

CREATE%s INDEX %.*s

CREATE%s INDEX %.*s

INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);

INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);

no such index: %S

no such index: %S

index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped

index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped

DELETE FROM %Q.%s WHERE name=%Q AND type='index'

DELETE FROM %Q.%s WHERE name=%Q AND type='index'

a JOIN clause is required before %s

a JOIN clause is required before %s

unable to identify the object to be reindexed

unable to identify the object to be reindexed

table %s may not be modified

table %s may not be modified

cannot modify %s because it is a view

cannot modify %s because it is a view

sqlite_version

sqlite_version

sqlite_source_id

sqlite_source_id

sqlite_log

sqlite_log

sqlite_compileoption_used

sqlite_compileoption_used

sqlite_compileoption_get

sqlite_compileoption_get

foreign key mismatch

foreign key mismatch

table %S has %d columns but %d values were supplied

table %S has %d columns but %d values were supplied

%d values for %d columns

%d values for %d columns

table %S has no column named %s

table %S has no column named %s

%s.%s may not be NULL

%s.%s may not be NULL

constraint %s failed

constraint %s failed

PRIMARY KEY must be unique

PRIMARY KEY must be unique

sqlite3_extension_init

sqlite3_extension_init

unable to open shared library [%s]

unable to open shared library [%s]

no entry point [%s] in shared library [%s]

no entry point [%s] in shared library [%s]

error during initialization: %s

error during initialization: %s

automatic extension loading failed: %s

automatic extension loading failed: %s

foreign_keys

foreign_keys

foreign_key_list

foreign_key_list

*** in database %s ***

*** in database %s ***

unsupported encoding: %s

unsupported encoding: %s

malformed database schema (%s)

malformed database schema (%s)

%s - %s

%s - %s

unsupported file format

unsupported file format

SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid

SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid

database schema is locked: %s

database schema is locked: %s

unknown or unsupported join type: %T %T%s%T

unknown or unsupported join type: %T %T%s%T

RIGHT and FULL OUTER JOINs are not currently supported

RIGHT and FULL OUTER JOINs are not currently supported

a NATURAL join may not have an ON or USING clause

a NATURAL join may not have an ON or USING clause

cannot have both ON and USING clauses in the same join

cannot have both ON and USING clauses in the same join

cannot join using column %s - column not present in both tables

cannot join using column %s - column not present in both tables

USE TEMP B-TREE FOR %s

USE TEMP B-TREE FOR %s

COMPOUND SUBQUERIES %d AND %d %s(%s)

COMPOUND SUBQUERIES %d AND %d %s(%s)

%s.%s

%s.%s

%s:%d

%s:%d

ORDER BY clause should come after %s not before

ORDER BY clause should come after %s not before

LIMIT clause should come after %s not before

LIMIT clause should come after %s not before

SELECTs to the left and right of %s do not have the same number of result columns

SELECTs to the left and right of %s do not have the same number of result columns

no such index: %s

no such index: %s

sqlite_subquery_%p_

sqlite_subquery_%p_

no such table: %s

no such table: %s

SCAN TABLE %s %s%s(~%d rows)

SCAN TABLE %s %s%s(~%d rows)

sqlite3_get_table() called with two or more incompatible queries

sqlite3_get_table() called with two or more incompatible queries

cannot create %s trigger on view: %S

cannot create %s trigger on view: %S

cannot create INSTEAD OF trigger on table: %S

cannot create INSTEAD OF trigger on table: %S

INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')

INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')

no such trigger: %S

no such trigger: %S

-- TRIGGER %s

-- TRIGGER %s

no such column: %s

no such column: %s

cannot VACUUM - SQL statements in progress

cannot VACUUM - SQL statements in progress

PRAGMA vacuum_db.synchronous=OFF

PRAGMA vacuum_db.synchronous=OFF

SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'

SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'

SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'

SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';

INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)

INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)

UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d

UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d

vtable constructor failed: %s

vtable constructor failed: %s

vtable constructor did not declare schema: %s

vtable constructor did not declare schema: %s

no such module: %s

no such module: %s

table %s: xBestIndex returned an invalid plan

table %s: xBestIndex returned an invalid plan

%s SUBQUERY %d

%s SUBQUERY %d

%s TABLE %s

%s TABLE %s

%s AS %s

%s AS %s

%s USING %s%sINDEX%s%s%s

%s USING %s%sINDEX%s%s%s

%s USING INTEGER PRIMARY KEY

%s USING INTEGER PRIMARY KEY

%s (rowid=?)

%s (rowid=?)

%s (rowid>? AND rowid)

%s (rowid>? AND rowid)

%s (rowid>?)

%s (rowid>?)

%s (rowid)

%s (rowid)

%s VIRTUAL TABLE INDEX %d:%s

%s VIRTUAL TABLE INDEX %d:%s

%s (~%lld rows)

%s (~%lld rows)

at most %d tables in a join

at most %d tables in a join

cannot use index: %s

cannot use index: %s

the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers

the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers

the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers

the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers

unable to close due to unfinished backup operation

unable to close due to unfinished backup operation

SQL logic error or missing database

SQL logic error or missing database

unknown operation

unknown operation

large file support is disabled

large file support is disabled

unknown database: %s

unknown database: %s

no such %s mode: %s

no such %s mode: %s

%s mode not allowed: %s

%s mode not allowed: %s

no such vfs: %s

no such vfs: %s

database corruption at line %d of [%.10s]

database corruption at line %d of [%.10s]

misuse at line %d of [%.10s]

misuse at line %d of [%.10s]

cannot open file at line %d of [%.10s]

cannot open file at line %d of [%.10s]

CPU Time: user %f sys %f

CPU Time: user %f sys %f

(%d) %s

(%d) %s

%*s = %s

%*s = %s

%-*.*s%s

%-*.*s%s

INSERT INTO %s VALUES(

INSERT INTO %s VALUES(

%sNULL

%sNULL

/**** ERROR: (%d) %s *****/

/**** ERROR: (%d) %s *****/

Memory Used: %d (max %d) bytes

Memory Used: %d (max %d) bytes

Number of Outstanding Allocations: %d (max %d)

Number of Outstanding Allocations: %d (max %d)

Number of Pcache Overflow Bytes: %d (max %d) bytes

Number of Pcache Overflow Bytes: %d (max %d) bytes

Number of Scratch Overflow Bytes: %d (max %d) bytes

Number of Scratch Overflow Bytes: %d (max %d) bytes

Largest Allocation: %d bytes

Largest Allocation: %d bytes

Largest Pcache Allocation: %d bytes

Largest Pcache Allocation: %d bytes

Largest Scratch Allocation: %d bytes

Largest Scratch Allocation: %d bytes

Lookaside Slots Used: %d (max %d)

Lookaside Slots Used: %d (max %d)

Successful lookaside attempts: %d

Successful lookaside attempts: %d

Lookaside failures due to size: %d

Lookaside failures due to size: %d

Lookaside failures due to OOM: %d

Lookaside failures due to OOM: %d

Pager Heap Usage: %d bytes

Pager Heap Usage: %d bytes

Page cache hits: %d

Page cache hits: %d

Page cache misses: %d

Page cache misses: %d

Page cache writes: %d

Page cache writes: %d

Schema Heap Usage: %d bytes

Schema Heap Usage: %d bytes

Statement Heap/Lookaside Usage: %d bytes

Statement Heap/Lookaside Usage: %d bytes

Fullscan Steps: %d

Fullscan Steps: %d

Sort Operations: %d

Sort Operations: %d

Autoindex Inserts: %d

Autoindex Inserts: %d

DELETE FROM sqlite_sequence;

DELETE FROM sqlite_sequence;

ANALYZE sqlite_master;

ANALYZE sqlite_master;

INSERT INTO sqlite_master(type,name,tbl_name,rootpage,sql)VALUES('table','%q','%q',0,'%q');

INSERT INTO sqlite_master(type,name,tbl_name,rootpage,sql)VALUES('table','%q','%q',0,'%q');

/****** %s ******/

/****** %s ******/

%s ORDER BY rowid DESC

%s ORDER BY rowid DESC

/****** ERROR: %s ******/

/****** ERROR: %s ******/

.backup ?DB? FILE Backup DB (default "main") to FILE

.backup ?DB? FILE Backup DB (default "main") to FILE

.bail ON|OFF Stop after hitting an error. Default OFF

.bail ON|OFF Stop after hitting an error. Default OFF

.databases List names and files of attached databases

.databases List names and files of attached databases

.dump ?TABLE? ... Dump the database in an SQL text format

.dump ?TABLE? ... Dump the database in an SQL text format

.echo ON|OFF Turn command echo on or off

.echo ON|OFF Turn command echo on or off

.exit Exit this program

.exit Exit this program

.explain ?ON|OFF? Turn output mode suitable for EXPLAIN on or off.

.explain ?ON|OFF? Turn output mode suitable for EXPLAIN on or off.

.header(s) ON|OFF Turn display of headers on or off

.header(s) ON|OFF Turn display of headers on or off

.help Show this message

.help Show this message

.import FILE TABLE Import data from FILE into TABLE

.import FILE TABLE Import data from FILE into TABLE

.indices ?TABLE? Show names of all indices

.indices ?TABLE? Show names of all indices

.load FILE ?ENTRY? Load an extension library

.load FILE ?ENTRY? Load an extension library

.log FILE|off Turn logging on or off. FILE can be stderr/stdout

.log FILE|off Turn logging on or off. FILE can be stderr/stdout

.mode MODE ?TABLE? Set output mode where MODE is one of:

.mode MODE ?TABLE? Set output mode where MODE is one of:

column Left-aligned columns. (See .width)

column Left-aligned columns. (See .width)

insert SQL insert statements for TABLE

insert SQL insert statements for TABLE

list Values delimited by .separator string

list Values delimited by .separator string

.nullvalue STRING Print STRING in place of NULL values

.nullvalue STRING Print STRING in place of NULL values

.output FILENAME Send output to FILENAME

.output FILENAME Send output to FILENAME

.output stdout Send output to the screen

.output stdout Send output to the screen

.prompt MAIN CONTINUE Replace the standard prompts

.prompt MAIN CONTINUE Replace the standard prompts

.quit Exit this program

.quit Exit this program

.read FILENAME Execute SQL in FILENAME

.read FILENAME Execute SQL in FILENAME

.restore ?DB? FILE Restore content of DB (default "main") from FILE

.restore ?DB? FILE Restore content of DB (default "main") from FILE

.schema ?TABLE? Show the CREATE statements

.schema ?TABLE? Show the CREATE statements

.separator STRING Change separator used by output mode and .import

.separator STRING Change separator used by output mode and .import

.show Show the current values for various settings

.show Show the current values for various settings

.stats ON|OFF Turn stats on or off

.stats ON|OFF Turn stats on or off

.tables ?TABLE? List names of tables

.tables ?TABLE? List names of tables

.timeout MS Try opening locked tables for MS milliseconds

.timeout MS Try opening locked tables for MS milliseconds

.trace FILE|off Output each SQL statement as it is run

.trace FILE|off Output each SQL statement as it is run

.vfsname ?AUX? Print the name of the VFS stack

.vfsname ?AUX? Print the name of the VFS stack

.width NUM1 NUM2 ... Set column widths for "column" mode

.width NUM1 NUM2 ... Set column widths for "column" mode

.timer ON|OFF Turn the CPU timer measurement on or off

.timer ON|OFF Turn the CPU timer measurement on or off

Error: unable to open database "%s": %s

Error: unable to open database "%s": %s

Error: cannot open "%s"

Error: cannot open "%s"

Error: %s

Error: %s

PRAGMA foreign_keys=OFF;

PRAGMA foreign_keys=OFF;

SELECT name, type, sql FROM sqlite_master WHERE sql NOT NULL AND type=='table' AND name!='sqlite_sequence'

SELECT name, type, sql FROM sqlite_master WHERE sql NOT NULL AND type=='table' AND name!='sqlite_sequence'

SELECT name, type, sql FROM sqlite_master WHERE name=='sqlite_sequence'

SELECT name, type, sql FROM sqlite_master WHERE name=='sqlite_sequence'

SELECT sql FROM sqlite_master WHERE sql NOT NULL AND type IN ('index','trigger','view')

SELECT sql FROM sqlite_master WHERE sql NOT NULL AND type IN ('index','trigger','view')

SELECT name, type, sql FROM sqlite_master WHERE tbl_name LIKE shellstatic() AND type=='table' AND sql NOT NULL

SELECT name, type, sql FROM sqlite_master WHERE tbl_name LIKE shellstatic() AND type=='table' AND sql NOT NULL

SELECT sql FROM sqlite_master WHERE sql NOT NULL AND type IN ('index','trigger','view') AND tbl_name LIKE shellstatic()

SELECT sql FROM sqlite_master WHERE sql NOT NULL AND type IN ('index','trigger','view') AND tbl_name LIKE shellstatic()

import

import

Error: non-null separator required for import

Error: non-null separator required for import

SELECT * FROM %s

SELECT * FROM %s

INSERT INTO %s VALUES(?

INSERT INTO %s VALUES(?

Error: %s line %d: expected %d columns of data but found %d

Error: %s line %d: expected %d columns of data but found %d

SELECT name FROM sqlite_master WHERE type='index' AND name NOT LIKE 'sqlite_%' UNION ALL SELECT name FROM sqlite_temp_master WHERE type='index' ORDER BY 1

SELECT name FROM sqlite_master WHERE type='index' AND name NOT LIKE 'sqlite_%' UNION ALL SELECT name FROM sqlite_temp_master WHERE type='index' ORDER BY 1

SELECT name FROM sqlite_master WHERE type='index' AND tbl_name LIKE shellstatic() UNION ALL SELECT name FROM sqlite_temp_master WHERE type='index' AND tbl_name LIKE shellstatic() ORDER BY 1

SELECT name FROM sqlite_master WHERE type='index' AND tbl_name LIKE shellstatic() UNION ALL SELECT name FROM sqlite_temp_master WHERE type='index' AND tbl_name LIKE shellstatic() ORDER BY 1

Error: querying sqlite_master and sqlite_temp_master

Error: querying sqlite_master and sqlite_temp_master

Error: invalid arguments: "%s". Enter ".help" for help

Error: invalid arguments: "%s". Enter ".help" for help

Error: cannot open pipe "%s"

Error: cannot open pipe "%s"

Error: cannot write to "%s"

Error: cannot write to "%s"

CREATE TABLE sqlite_master (

CREATE TABLE sqlite_master (

CREATE TEMP TABLE sqlite_temp_master (

CREATE TEMP TABLE sqlite_temp_master (

SELECT sql FROM (SELECT sql sql, type type, tbl_name tbl_name, name name, rowid x FROM sqlite_master UNION ALL SELECT sql, type, tbl_name, name, rowid FROM sqlite_temp_master) WHERE lower(tbl_name) LIKE shellstatic() AND type!='meta' AND sql NOTNULL ORDER BY substr(type,2,1), CASE type WHEN 'view' THEN rowid ELSE name END

SELECT sql FROM (SELECT sql sql, type type, tbl_name tbl_name, name name, rowid x FROM sqlite_master UNION ALL SELECT sql, type, tbl_name, name, rowid FROM sqlite_temp_master) WHERE lower(tbl_name) LIKE shellstatic() AND type!='meta' AND sql NOTNULL ORDER BY substr(type,2,1), CASE type WHEN 'view' THEN rowid ELSE name END

SELECT sql FROM (SELECT sql sql, type type, tbl_name tbl_name, name name, rowid x FROM sqlite_master UNION ALL SELECT sql, type, tbl_name, name, rowid FROM sqlite_temp_master) WHERE type!='meta' AND sql NOTNULL AND name NOT LIKE 'sqlite_%'ORDER BY substr(type,2,1), CASE type WHEN 'view' THEN rowid ELSE name END

SELECT sql FROM (SELECT sql sql, type type, tbl_name tbl_name, name name, rowid x FROM sqlite_master UNION ALL SELECT sql, type, tbl_name, name, rowid FROM sqlite_temp_master) WHERE type!='meta' AND sql NOTNULL AND name NOT LIKE 'sqlite_%'ORDER BY substr(type,2,1), CASE type WHEN 'view' THEN rowid ELSE name END

%9.9s: %s

%9.9s: %s

SELECT name FROM sqlite_master WHERE type IN ('table','view') AND name NOT LIKE 'sqlite_%%' AND name LIKE ?1

SELECT name FROM sqlite_master WHERE type IN ('table','view') AND name NOT LIKE 'sqlite_%%' AND name LIKE ?1

%z UNION ALL SELECT 'temp.' || name FROM sqlite_temp_master WHERE type IN ('table','view') AND name NOT LIKE 'sqlite_%%' AND name LIKE ?1

%z UNION ALL SELECT 'temp.' || name FROM sqlite_temp_master WHERE type IN ('table','view') AND name NOT LIKE 'sqlite_%%' AND name LIKE ?1

%z UNION ALL SELECT '%q.' || name FROM "%w".sqlite_master WHERE type IN ('table','view') AND name NOT LIKE 'sqlite_%%' AND name LIKE ?1

%z UNION ALL SELECT '%q.' || name FROM "%w".sqlite_master WHERE type IN ('table','view') AND name NOT LIKE 'sqlite_%%' AND name LIKE ?1

%s%-*s

%s%-*s

iskeyword

iskeyword

ambiguous option name: "%s"

ambiguous option name: "%s"

Error: invalid testctrl option: %s

Error: invalid testctrl option: %s

%d (0xx)

%d (0xx)

Error: testctrl %s takes a single int option

Error: testctrl %s takes a single int option

Error: testctrl %s takes no options

Error: testctrl %s takes no options

Error: testctrl %s takes a single unsigned int option

Error: testctrl %s takes a single unsigned int option

Error: CLI support for testctrl %s not implemented

Error: CLI support for testctrl %s not implemented

SQLite %s %s

SQLite %s %s

Error: unknown command or invalid arguments: "%s". Enter ".help" for help

Error: unknown command or invalid arguments: "%s". Enter ".help" for help

Error: near line %d:

Error: near line %d:

%s %s

%s %s

Error: incomplete SQL: %s

Error: incomplete SQL: %s

%s: Error: cannot locate your home directory

%s: Error: cannot locate your home directory

%s/.sqliterc

%s/.sqliterc

-- Loading resources from %s

-- Loading resources from %s

Usage: %s [OPTIONS] FILENAME [SQL]

Usage: %s [OPTIONS] FILENAME [SQL]

FILENAME is the name of an SQLite database. A new database is created

FILENAME is the name of an SQLite database. A new database is created

sqlite>

sqlite>

SQLite header and source version mismatch

SQLite header and source version mismatch

no such VFS: "%s"

no such VFS: "%s"

%s: Error: too many options: "%s"

%s: Error: too many options: "%s"

%s: Error: missing argument for option: %s

%s: Error: missing argument for option: %s

Error: unable to process SQL "%s"

Error: unable to process SQL "%s"

%s: Error: unknown option: %s

%s: Error: unknown option: %s

%s/.sqlite_history

%s/.sqlite_history

SQLite version %s %.19s

SQLite version %s %.19s

Enter ".help" for instructions

Enter ".help" for instructions

Enter SQL statements terminated with a ";"

Enter SQL statements terminated with a ";"

zcÁ

zcÁ

|%Documents and Settings%\%current user%\Application Data\crys.exe

|%Documents and Settings%\%current user%\Application Data\crys.exe

GetCPInfo

GetCPInfo

]

]

.text

.text

`.rdata

`.rdata

@.data

@.data

.reloc

.reloc

KERNEL32.DLL

KERNEL32.DLL

ole32.dll

ole32.dll

ffcookieextractor.dll

ffcookieextractor.dll

_getFirefoxCookie

_getFirefoxCookie

mscoree.dll

mscoree.dll

nKERNEL32.DLL

nKERNEL32.DLL

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

- floating point support not loaded

- floating point support not loaded

WUSER32.DLL

WUSER32.DLL

888816666554443

888816666554443

6666554443

6666554443

!6666554443

!6666554443

%AppData%\Mozilla\Firefox

%AppData%\Mozilla\Firefox

\profiles.ini

\profiles.ini

\cookies.sqlite

\cookies.sqlite

Kernel32.dll

Kernel32.dll

crys.exe_1460_rwx_675A6000_00003000:

.Qg

.Qg

*Rg`.Rg|)RgL Rg

*Rg`.Rg|)RgL Rg

DW20.EXE_1296_rwx_00AB0000_0003B000:

.text

.text

`.data

`.data

.reloc

.reloc

%s, u %s %u u:u:u GMT

%s, u %s %u u:u:u GMT

HTTP/1.1

HTTP/1.1

HTTP/1.0

HTTP/1.0

hXXp://

hXXp://

; charset=%s

; charset=%s

HTTP/1.1 %u %s

HTTP/1.1 %u %s

Date: %s

Date: %s

Content-Length: %u

Content-Length: %u

Expires: %s

Expires: %s

Content-Type: %s%s

Content-Type: %s%s

ID: %s

ID: %s

value_%s

value_%s

value_%s_%s

value_%s_%s

%s = "%s";

%s = "%s";

update.exe

update.exe

config.bin

config.bin

PR_OpenTCPSocket

PR_OpenTCPSocket

cit_ffcookie.module

cit_ffcookie.module

cit_video.module

cit_video.module

%ds~U;MM

%ds~U;MM

userenv.dll

userenv.dll

del "%s"

del "%s"

if exist "%s" goto d

if exist "%s" goto d

del /F "%s"

del /F "%s"

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1)

urlmon.dll

urlmon.dll

cabinet.dll

cabinet.dll

hXXp://xxxxxxxx.com/xxxx/xxxx.php

hXXp://xxxxxxxx.com/xxxx/xxxx.php

%s%s%s

%s%s%s

gdiplus.dll

gdiplus.dll

GdiplusShutdown

GdiplusShutdown

ole32.dll

ole32.dll

gdi32.dll

gdi32.dll

6;:5;66"

6;:5;66"

,1;(,; = 1

,1;(,; = 1

'472%9,{

'472%9,{

F@ICTQ}cRTWAunO}mmts}NX~csgzn~)[jzyemer\]ika

F@ICTQ}cRTWAunO}mmts}NX~csgzn~)[jzyemer\]ika

8/3.xae4LOa

8/3.xae4LOa

6 !26!1'1!

6 !26!1'1!

hXXps://

hXXps://

HTTP/1.

HTTP/1.

facebook.com

facebook.com

Cookie: %s

Cookie: %s

Referer: %s

Referer: %s

Accept: %s

Accept: %s

Accept-Language: %s

Accept-Language: %s

Accept-Encoding: %s

Accept-Encoding: %s

_getFirefoxCookie

_getFirefoxCookie

hXXp://VVV.google.com/webhp

hXXp://VVV.google.com/webhp

SSShD

SSShD

SSShXe

SSShXe

SSShye

SSShye

GetProcessHeap

GetProcessHeap

CreatePipe

CreatePipe

KERNEL32.dll

KERNEL32.dll

MsgWaitForMultipleObjects

MsgWaitForMultipleObjects

OpenWindowStationW

OpenWindowStationW

GetProcessWindowStation

GetProcessWindowStation

CreateWindowStationW

CreateWindowStationW

CloseWindowStation

CloseWindowStation

SetProcessWindowStation

SetProcessWindowStation

SetKeyboardState

SetKeyboardState

ExitWindowsEx

ExitWindowsEx

GetKeyboardState

GetKeyboardState

MapVirtualKeyW

MapVirtualKeyW

GetKeyboardLayoutList

GetKeyboardLayoutList

USER32.dll

USER32.dll

RegCreateKeyExW

RegCreateKeyExW

RegOpenKeyExW

RegOpenKeyExW

RegCloseKey

RegCloseKey

RegCreateKeyW

RegCreateKeyW

RegEnumKeyW

RegEnumKeyW

RegQueryInfoKeyW

RegQueryInfoKeyW

RegEnumKeyExW

RegEnumKeyExW

ADVAPI32.dll

ADVAPI32.dll

UrlUnescapeA

UrlUnescapeA

SHDeleteKeyW

SHDeleteKeyW

PathIsURLW

PathIsURLW

SHLWAPI.dll

SHLWAPI.dll

ShellExecuteW

ShellExecuteW

SHELL32.dll

SHELL32.dll

Secur32.dll

Secur32.dll

SetViewportOrgEx

SetViewportOrgEx

GDI32.dll

GDI32.dll

WS2_32.dll

WS2_32.dll

PFXImportCertStore

PFXImportCertStore

CertDeleteCertificateFromStore

CertDeleteCertificateFromStore

CertOpenSystemStoreW

CertOpenSystemStoreW

CertCloseStore

CertCloseStore

CertEnumCertificatesInStore

CertEnumCertificatesInStore

CertDuplicateCertificateContext

CertDuplicateCertificateContext

PFXExportCertStoreEx

PFXExportCertStoreEx

CRYPT32.dll

CRYPT32.dll

HttpSendRequestExA

HttpSendRequestExA

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestExW

HttpSendRequestExW

HttpSendRequestW

HttpSendRequestW

HttpOpenRequestA

HttpOpenRequestA

HttpOpenRequestW

HttpOpenRequestW

HttpEndRequestA

HttpEndRequestA

HttpSendRequestA

HttpSendRequestA

HttpEndRequestW

HttpEndRequestW

InternetCrackUrlA

InternetCrackUrlA

HttpAddRequestHeadersW

HttpAddRequestHeadersW

GetUrlCacheEntryInfoW

GetUrlCacheEntryInfoW

HttpAddRequestHeadersA

HttpAddRequestHeadersA

WININET.dll

WININET.dll

OLEAUT32.dll

OLEAUT32.dll

NETAPI32.dll

NETAPI32.dll

VERSION.dll

VERSION.dll

WINMM.dll

WINMM.dll

PSSSSSSh

PSSSSSSh

3$3*30383

3$3*30383

6|7k7u7

6|7k7u7

9 :1:::@:

9 :1:::@:

42>204:4

42>204:4

sXXXX

sXXXX

nspr4.dll

nspr4.dll

chrome.dll

chrome.dll

\StringFileInfo\xx\%s

\StringFileInfo\xx\%s

ntdll.dll

ntdll.dll

kernel32.dll

kernel32.dll

"%s" %s

"%s" %s

/c "%s"

/c "%s"

%sx.%s

%sx.%s

%sx

%sx

SELECT * FROM %s

SELECT * FROM %s

Company: %s

Company: %s

Product: %s

Product: %s

Version: %s

Version: %s

Software\Microsoft\Windows\CurrentVersion\Uninstall

Software\Microsoft\Windows\CurrentVersion\Uninstall

%u: %s | %s | %s

%u: %s | %s | %s

Global\XXX

Global\XXX

SysShadow

SysShadow

Chrome

Chrome

Firefox

Firefox

%Documents and Settings%\%current user%\Application Data

%Documents and Settings%\%current user%\Application Data

{E90C4A0B-BD46-7BBE-341D-3959D67D1D48}

{E90C4A0B-BD46-7BBE-341D-3959D67D1D48}

%Documents and Settings%\%current user%\Application Data\Tyawy\foed.qid

%Documents and Settings%\%current user%\Application Data\Tyawy\foed.qid

%Documents and Settings%\%current user%\Application Data\Tyawy

%Documents and Settings%\%current user%\Application Data\Tyawy

foed.qid

foed.qid

Global\{7F77F82E-0F63-EDC5-341D-3959D67D1D48}

Global\{7F77F82E-0F63-EDC5-341D-3959D67D1D48}

DW20.EXE_1296_rwx_015A0000_0006C000:

t8It.IIt#

t8It.IIt#

.FGyO

.FGyO

FTPj

FTPj

YPSSSh

YPSSSh

9t$Lt.VV

9t$Lt.VV

,4,56,789

,4,56,789

GetProcessWindowStation

GetProcessWindowStation

3.7.13

3.7.13

SQLite format 3

SQLite format 3

CREATE TABLE sqlite_master(

CREATE TABLE sqlite_master(

sql text

sql text

CREATE TEMP TABLE sqlite_temp_master(

CREATE TEMP TABLE sqlite_temp_master(

REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY\

REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY\

-cmd command run "command" before reading stdin

-cmd command run "command" before reading stdin

-echo print commands before execution

-echo print commands before execution

-version show SQLite version

-version show SQLite version

%a, %d-%b-%Y %H:%M:%S GMT

%a, %d-%b-%Y %H:%M:%S GMT

isHttpOnly

isHttpOnly

HttpOnly=YES

HttpOnly=YES

HttpOnly=NO

HttpOnly=NO

SQLITE_

SQLITE_

d-d-d d:d:d

d-d-d d:d:d

d:d:d

d:d:d

d-d-d

d-d-d

failed to allocate %u bytes of memory

failed to allocate %u bytes of memory

failed memory resize %u to %u bytes

failed memory resize %u to %u bytes

922337203685477580

922337203685477580

API call with %s database connection pointer

API call with %s database connection pointer

RowKey

RowKey

GetProcessHeap

GetProcessHeap

OsError 0x%x (%u)

OsError 0x%x (%u)

os_win.c:%d: (%d) %s(%s) - %s

os_win.c:%d: (%d) %s(%s) - %s

delayed %dms for lock/sharing conflict

delayed %dms for lock/sharing conflict

%s-shm

%s-shm

%s\etilqs_

%s\etilqs_

%s\%s

%s\%s

Recovered %d frames from WAL file %s

Recovered %d frames from WAL file %s

cannot limit WAL size: %s

cannot limit WAL size: %s

invalid page number %d

invalid page number %d

2nd reference to page %d

2nd reference to page %d

Failed to read ptrmap key=%d

Failed to read ptrmap key=%d

Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)

Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)

%d of %d pages missing from overflow list starting at %d

%d of %d pages missing from overflow list starting at %d

failed to get page %d

failed to get page %d

freelist leaf count too big on page %d

freelist leaf count too big on page %d

Page %d:

Page %d:

unable to get the page. error code=%d

unable to get the page. error code=%d

btreeInitPage() returns error code %d

btreeInitPage() returns error code %d

On tree page %d cell %d:

On tree page %d cell %d:

On page %d at right child:

On page %d at right child:

Corruption detected in cell %d on page %d

Corruption detected in cell %d on page %d

Multiple uses for byte %d of page %d

Multiple uses for byte %d of page %d

Fragmentation of %d bytes reported as %d on page %d

Fragmentation of %d bytes reported as %d on page %d

Page %d is never used

Page %d is never used

Pointer map page %d is referenced

Pointer map page %d is referenced

Outstanding page count goes from %d to %d during this analysis

Outstanding page count goes from %d to %d during this analysis

unknown database %s

unknown database %s

keyinfo(%d

keyinfo(%d

%s(%d)

%s(%d)

%s-mjXXXXXX9XXz

%s-mjXXXXXX9XXz

MJ delete: %s

MJ delete: %s

MJ collide: %s

MJ collide: %s

-mjX9X

-mjX9X

foreign key constraint failed

foreign key constraint failed

unable to use function %s in the requested context

unable to use function %s in the requested context

bind on a busy prepared statement: [%s]

bind on a busy prepared statement: [%s]

zeroblob(%d)

zeroblob(%d)

abort at %d in [%s]: %s

abort at %d in [%s]: %s

constraint failed at %d in [%s]

constraint failed at %d in [%s]

cannot open savepoint - SQL statements in progress

cannot open savepoint - SQL statements in progress

no such savepoint: %s

no such savepoint: %s

cannot release savepoint - SQL statements in progress

cannot release savepoint - SQL statements in progress

cannot commit transaction - SQL statements in progress

cannot commit transaction - SQL statements in progress

sqlite_temp_master

sqlite_temp_master

sqlite_master

sqlite_master

SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid

SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid

cannot change %s wal mode from within a transaction

cannot change %s wal mode from within a transaction

database table is locked: %s

database table is locked: %s

statement aborts at %d: [%s] %s

statement aborts at %d: [%s] %s

cannot open value of type %s

cannot open value of type %s

cannot open virtual table: %s

cannot open virtual table: %s

cannot open view: %s

cannot open view: %s

no such column: "%s"

no such column: "%s"

foreign key

foreign key

indexed

indexed

cannot open %s column for writing

cannot open %s column for writing

misuse of aliased aggregate %s

misuse of aliased aggregate %s

%s: %s.%s.%s

%s: %s.%s.%s

%s: %s.%s

%s: %s.%s

%s: %s

%s: %s

not authorized to use function: %s

not authorized to use function: %s

%r %s BY term out of range - should be between 1 and %d

%r %s BY term out of range - should be between 1 and %d

too many terms in %s BY clause

too many terms in %s BY clause

Expression tree is too large (maximum depth %d)

Expression tree is too large (maximum depth %d)

variable number must be between ?1 and ?%d

variable number must be between ?1 and ?%d

too many SQL variables

too many SQL variables

too many columns in %s

too many columns in %s

EXECUTE %s%s SUBQUERY %d

EXECUTE %s%s SUBQUERY %d

misuse of aggregate: %s()

misuse of aggregate: %s()

%.*s"%w"%s

%.*s"%w"%s

%s%.*s"%w"

%s%.*s"%w"

sqlite_rename_table

sqlite_rename_table

sqlite_rename_trigger

sqlite_rename_trigger

sqlite_rename_parent

sqlite_rename_parent

%s OR name=%Q

%s OR name=%Q

type='trigger' AND (%s)

type='trigger' AND (%s)

sqlite_

sqlite_

table %s may not be altered

table %s may not be altered

there is already another table or index with this name: %s

there is already another table or index with this name: %s

view %s may not be altered

view %s may not be altered

UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;

UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;

sqlite_sequence

sqlite_sequence

UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q

UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q

UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');

UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');

UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;

UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;

Cannot add a PRIMARY KEY column

Cannot add a PRIMARY KEY column

UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q

UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q

sqlite_altertab_%s

sqlite_altertab_%s

sqlite_stat1

sqlite_stat1

CREATE TABLE %Q.%s(%s)

CREATE TABLE %Q.%s(%s)

DELETE FROM %Q.%s WHERE %s=%Q

DELETE FROM %Q.%s WHERE %s=%Q

SELECT tbl,idx,stat FROM %Q.sqlite_stat1

SELECT tbl,idx,stat FROM %Q.sqlite_stat1

invalid name: "%s"

invalid name: "%s"

too many attached databases - max %d

too many attached databases - max %d

database %s is already in use

database %s is already in use

unable to open database: %s

unable to open database: %s

no such database: %s

no such database: %s

cannot detach database %s

cannot detach database %s

database %s is locked

database %s is locked

sqlite_detach

sqlite_detach

sqlite_attach

sqlite_attach

%s %T cannot reference objects in database %s

%s %T cannot reference objects in database %s

access to %s.%s.%s is prohibited

access to %s.%s.%s is prohibited

access to %s.%s is prohibited

access to %s.%s is prohibited

object name reserved for internal use: %s

object name reserved for internal use: %s

there is already an index named %s

there is already an index named %s

too many columns on %s

too many columns on %s

duplicate column name: %s

duplicate column name: %s

default value of column [%s] is not constant

default value of column [%s] is not constant

table "%s" has more than one primary key

table "%s" has more than one primary key

AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY

AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY

no such collation sequence: %s

no such collation sequence: %s

CREATE %s %.*s

CREATE %s %.*s

UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d

UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d

CREATE TABLE %Q.sqlite_sequence(name,seq)

CREATE TABLE %Q.sqlite_sequence(name,seq)

view %s is circularly defined

view %s is circularly defined

UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d

UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d

sqlite_stat%d

sqlite_stat%d

DELETE FROM %Q.sqlite_sequence WHERE name=%Q

DELETE FROM %Q.sqlite_sequence WHERE name=%Q

DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'

DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'

sqlite_stat

sqlite_stat

table %s may not be dropped

table %s may not be dropped

use DROP TABLE to delete table %s

use DROP TABLE to delete table %s

use DROP VIEW to delete view %s

use DROP VIEW to delete view %s

foreign key on %s should reference only one column of table %T

foreign key on %s should reference only one column of table %T

number of columns in foreign key does not match the number of columns in the referenced table

number of columns in foreign key does not match the number of columns in the referenced table

unknown column "%s" in foreign key definition

unknown column "%s" in foreign key definition

indexed columns are not unique

indexed columns are not unique

table %s may not be indexed

table %s may not be indexed

views may not be indexed

views may not be indexed

virtual tables may not be indexed

virtual tables may not be indexed

there is already a table named %s

there is already a table named %s

index %s already exists

index %s already exists

sqlite_autoindex_%s_%d

sqlite_autoindex_%s_%d

table %s has no column named %s

table %s has no column named %s

CREATE%s INDEX %.*s

CREATE%s INDEX %.*s

INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);

INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);

no such index: %S

no such index: %S

index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped

index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped

DELETE FROM %Q.%s WHERE name=%Q AND type='index'

DELETE FROM %Q.%s WHERE name=%Q AND type='index'

a JOIN clause is required before %s

a JOIN clause is required before %s

unable to identify the object to be reindexed

unable to identify the object to be reindexed

table %s may not be modified

table %s may not be modified

cannot modify %s because it is a view

cannot modify %s because it is a view

sqlite_version

sqlite_version

sqlite_source_id

sqlite_source_id

sqlite_log

sqlite_log

sqlite_compileoption_used

sqlite_compileoption_used

sqlite_compileoption_get

sqlite_compileoption_get

foreign key mismatch

foreign key mismatch

table %S has %d columns but %d values were supplied

table %S has %d columns but %d values were supplied

%d values for %d columns

%d values for %d columns

table %S has no column named %s

table %S has no column named %s

%s.%s may not be NULL

%s.%s may not be NULL

constraint %s failed

constraint %s failed

PRIMARY KEY must be unique

PRIMARY KEY must be unique

sqlite3_extension_init

sqlite3_extension_init

unable to open shared library [%s]

unable to open shared library [%s]

no entry point [%s] in shared library [%s]

no entry point [%s] in shared library [%s]

error during initialization: %s

error during initialization: %s

automatic extension loading failed: %s

automatic extension loading failed: %s

foreign_keys

foreign_keys

foreign_key_list

foreign_key_list

*** in database %s ***

*** in database %s ***

unsupported encoding: %s

unsupported encoding: %s

malformed database schema (%s)

malformed database schema (%s)

%s - %s

%s - %s

unsupported file format

unsupported file format

SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid

SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid

database schema is locked: %s

database schema is locked: %s

unknown or unsupported join type: %T %T%s%T

unknown or unsupported join type: %T %T%s%T

RIGHT and FULL OUTER JOINs are not currently supported

RIGHT and FULL OUTER JOINs are not currently supported

a NATURAL join may not have an ON or USING clause

a NATURAL join may not have an ON or USING clause

cannot have both ON and USING clauses in the same join

cannot have both ON and USING clauses in the same join

cannot join using column %s - column not present in both tables

cannot join using column %s - column not present in both tables

USE TEMP B-TREE FOR %s

USE TEMP B-TREE FOR %s

COMPOUND SUBQUERIES %d AND %d %s(%s)

COMPOUND SUBQUERIES %d AND %d %s(%s)

%s.%s

%s.%s

%s:%d

%s:%d

ORDER BY clause should come after %s not before

ORDER BY clause should come after %s not before

LIMIT clause should come after %s not before

LIMIT clause should come after %s not before

SELECTs to the left and right of %s do not have the same number of result columns

SELECTs to the left and right of %s do not have the same number of result columns

no such index: %s

no such index: %s

sqlite_subquery_%p_

sqlite_subquery_%p_

no such table: %s

no such table: %s

SCAN TABLE %s %s%s(~%d rows)

SCAN TABLE %s %s%s(~%d rows)

sqlite3_get_table() called with two or more incompatible queries

sqlite3_get_table() called with two or more incompatible queries

cannot create %s trigger on view: %S

cannot create %s trigger on view: %S

cannot create INSTEAD OF trigger on table: %S

cannot create INSTEAD OF trigger on table: %S

INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')

INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')

no such trigger: %S

no such trigger: %S

-- TRIGGER %s

-- TRIGGER %s

no such column: %s

no such column: %s

cannot VACUUM - SQL statements in progress

cannot VACUUM - SQL statements in progress

PRAGMA vacuum_db.synchronous=OFF

PRAGMA vacuum_db.synchronous=OFF

SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'

SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'

SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'

SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';

INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)

INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)

UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d

UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d

vtable constructor failed: %s

vtable constructor failed: %s

vtable constructor did not declare schema: %s

vtable constructor did not declare schema: %s

no such module: %s

no such module: %s

table %s: xBestIndex returned an invalid plan

table %s: xBestIndex returned an invalid plan

%s SUBQUERY %d

%s SUBQUERY %d

%s TABLE %s

%s TABLE %s

%s AS %s

%s AS %s

%s USING %s%sINDEX%s%s%s

%s USING %s%sINDEX%s%s%s

%s USING INTEGER PRIMARY KEY

%s USING INTEGER PRIMARY KEY

%s (rowid=?)

%s (rowid=?)

%s (rowid>? AND rowid)

%s (rowid>? AND rowid)

%s (rowid>?)

%s (rowid>?)

%s (rowid)

%s (rowid)

%s VIRTUAL TABLE INDEX %d:%s

%s VIRTUAL TABLE INDEX %d:%s

%s (~%lld rows)

%s (~%lld rows)

at most %d tables in a join

at most %d tables in a join

cannot use index: %s

cannot use index: %s

the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers

the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers

the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers

the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers

unable to close due to unfinished backup operation

unable to close due to unfinished backup operation

SQL logic error or missing database

SQL logic error or missing database

unknown operation

unknown operation

large file support is disabled

large file support is disabled

unknown database: %s

unknown database: %s

no such %s mode: %s

no such %s mode: %s

%s mode not allowed: %s

%s mode not allowed: %s

no such vfs: %s

no such vfs: %s

database corruption at line %d of [%.10s]

database corruption at line %d of [%.10s]

misuse at line %d of [%.10s]

misuse at line %d of [%.10s]

cannot open file at line %d of [%.10s]

cannot open file at line %d of [%.10s]

CPU Time: user %f sys %f

CPU Time: user %f sys %f

(%d) %s

(%d) %s

%*s = %s

%*s = %s

%-*.*s%s

%-*.*s%s

INSERT INTO %s VALUES(

INSERT INTO %s VALUES(

%sNULL

%sNULL

/**** ERROR: (%d) %s *****/

/**** ERROR: (%d) %s *****/

Memory Used: %d (max %d) bytes

Memory Used: %d (max %d) bytes

Number of Outstanding Allocations: %d (max %d)

Number of Outstanding Allocations: %d (max %d)

Number of Pcache Overflow Bytes: %d (max %d) bytes

Number of Pcache Overflow Bytes: %d (max %d) bytes

Number of Scratch Overflow Bytes: %d (max %d) bytes

Number of Scratch Overflow Bytes: %d (max %d) bytes

Largest Allocation: %d bytes

Largest Allocation: %d bytes

Largest Pcache Allocation: %d bytes

Largest Pcache Allocation: %d bytes

Largest Scratch Allocation: %d bytes

Largest Scratch Allocation: %d bytes

Lookaside Slots Used: %d (max %d)

Lookaside Slots Used: %d (max %d)

Successful lookaside attempts: %d

Successful lookaside attempts: %d

Lookaside failures due to size: %d

Lookaside failures due to size: %d

Lookaside failures due to OOM: %d

Lookaside failures due to OOM: %d

Pager Heap Usage: %d bytes

Pager Heap Usage: %d bytes

Page cache hits: %d

Page cache hits: %d

Page cache misses: %d

Page cache misses: %d

Page cache writes: %d

Page cache writes: %d

Schema Heap Usage: %d bytes

Schema Heap Usage: %d bytes

Statement Heap/Lookaside Usage: %d bytes

Statement Heap/Lookaside Usage: %d bytes

Fullscan Steps: %d

Fullscan Steps: %d

Sort Operations: %d

Sort Operations: %d

Autoindex Inserts: %d

Autoindex Inserts: %d

DELETE FROM sqlite_sequence;

DELETE FROM sqlite_sequence;

ANALYZE sqlite_master;

ANALYZE sqlite_master;

INSERT INTO sqlite_master(type,name,tbl_name,rootpage,sql)VALUES('table','%q','%q',0,'%q');

INSERT INTO sqlite_master(type,name,tbl_name,rootpage,sql)VALUES('table','%q','%q',0,'%q');

/****** %s ******/

/****** %s ******/

%s ORDER BY rowid DESC

%s ORDER BY rowid DESC

/****** ERROR: %s ******/

/****** ERROR: %s ******/

.backup ?DB? FILE Backup DB (default "main") to FILE

.backup ?DB? FILE Backup DB (default "main") to FILE

.bail ON|OFF Stop after hitting an error. Default OFF

.bail ON|OFF Stop after hitting an error. Default OFF

.databases List names and files of attached databases

.databases List names and files of attached databases

.dump ?TABLE? ... Dump the database in an SQL text format

.dump ?TABLE? ... Dump the database in an SQL text format

.echo ON|OFF Turn command echo on or off

.echo ON|OFF Turn command echo on or off

.exit Exit this program

.exit Exit this program

.explain ?ON|OFF? Turn output mode suitable for EXPLAIN on or off.

.explain ?ON|OFF? Turn output mode suitable for EXPLAIN on or off.

.header(s) ON|OFF Turn display of headers on or off

.header(s) ON|OFF Turn display of headers on or off

.help Show this message

.help Show this message

.import FILE TABLE Import data from FILE into TABLE

.import FILE TABLE Import data from FILE into TABLE

.indices ?TABLE? Show names of all indices

.indices ?TABLE? Show names of all indices

.load FILE ?ENTRY? Load an extension library

.load FILE ?ENTRY? Load an extension library

.log FILE|off Turn logging on or off. FILE can be stderr/stdout

.log FILE|off Turn logging on or off. FILE can be stderr/stdout

.mode MODE ?TABLE? Set output mode where MODE is one of:

.mode MODE ?TABLE? Set output mode where MODE is one of:

column Left-aligned columns. (See .width)

column Left-aligned columns. (See .width)

insert SQL insert statements for TABLE

insert SQL insert statements for TABLE

list Values delimited by .separator string

list Values delimited by .separator string

.nullvalue STRING Print STRING in place of NULL values

.nullvalue STRING Print STRING in place of NULL values

.output FILENAME Send output to FILENAME

.output FILENAME Send output to FILENAME

.output stdout Send output to the screen

.output stdout Send output to the screen

.prompt MAIN CONTINUE Replace the standard prompts

.prompt MAIN CONTINUE Replace the standard prompts

.quit Exit this program

.quit Exit this program

.read FILENAME Execute SQL in FILENAME

.read FILENAME Execute SQL in FILENAME

.restore ?DB? FILE Restore content of DB (default "main") from FILE

.restore ?DB? FILE Restore content of DB (default "main") from FILE

.schema ?TABLE? Show the CREATE statements

.schema ?TABLE? Show the CREATE statements

.separator STRING Change separator used by output mode and .import

.separator STRING Change separator used by output mode and .import

.show Show the current values for various settings

.show Show the current values for various settings

.stats ON|OFF Turn stats on or off

.stats ON|OFF Turn stats on or off

.tables ?TABLE? List names of tables

.tables ?TABLE? List names of tables

.timeout MS Try opening locked tables for MS milliseconds

.timeout MS Try opening locked tables for MS milliseconds

.trace FILE|off Output each SQL statement as it is run

.trace FILE|off Output each SQL statement as it is run

.vfsname ?AUX? Print the name of the VFS stack

.vfsname ?AUX? Print the name of the VFS stack

.width NUM1 NUM2 ... Set column widths for "column" mode

.width NUM1 NUM2 ... Set column widths for "column" mode

.timer ON|OFF Turn the CPU timer measurement on or off

.timer ON|OFF Turn the CPU timer measurement on or off

Error: unable to open database "%s": %s

Error: unable to open database "%s": %s

Error: cannot open "%s"

Error: cannot open "%s"

Error: %s

Error: %s

PRAGMA foreign_keys=OFF;

PRAGMA foreign_keys=OFF;

SELECT name, type, sql FROM sqlite_master WHERE sql NOT NULL AND type=='table' AND name!='sqlite_sequence'

SELECT name, type, sql FROM sqlite_master WHERE sql NOT NULL AND type=='table' AND name!='sqlite_sequence'

SELECT name, type, sql FROM sqlite_master WHERE name=='sqlite_sequence'

SELECT name, type, sql FROM sqlite_master WHERE name=='sqlite_sequence'

SELECT sql FROM sqlite_master WHERE sql NOT NULL AND type IN ('index','trigger','view')

SELECT sql FROM sqlite_master WHERE sql NOT NULL AND type IN ('index','trigger','view')

SELECT name, type, sql FROM sqlite_master WHERE tbl_name LIKE shellstatic() AND type=='table' AND sql NOT NULL

SELECT name, type, sql FROM sqlite_master WHERE tbl_name LIKE shellstatic() AND type=='table' AND sql NOT NULL

SELECT sql FROM sqlite_master WHERE sql NOT NULL AND type IN ('index','trigger','view') AND tbl_name LIKE shellstatic()

SELECT sql FROM sqlite_master WHERE sql NOT NULL AND type IN ('index','trigger','view') AND tbl_name LIKE shellstatic()

import

import

Error: non-null separator required for import

Error: non-null separator required for import

SELECT * FROM %s

SELECT * FROM %s

INSERT INTO %s VALUES(?

INSERT INTO %s VALUES(?

Error: %s line %d: expected %d columns of data but found %d

Error: %s line %d: expected %d columns of data but found %d

SELECT name FROM sqlite_master WHERE type='index' AND name NOT LIKE 'sqlite_%' UNION ALL SELECT name FROM sqlite_temp_master WHERE type='index' ORDER BY 1

SELECT name FROM sqlite_master WHERE type='index' AND name NOT LIKE 'sqlite_%' UNION ALL SELECT name FROM sqlite_temp_master WHERE type='index' ORDER BY 1

SELECT name FROM sqlite_master WHERE type='index' AND tbl_name LIKE shellstatic() UNION ALL SELECT name FROM sqlite_temp_master WHERE type='index' AND tbl_name LIKE shellstatic() ORDER BY 1

SELECT name FROM sqlite_master WHERE type='index' AND tbl_name LIKE shellstatic() UNION ALL SELECT name FROM sqlite_temp_master WHERE type='index' AND tbl_name LIKE shellstatic() ORDER BY 1

Error: querying sqlite_master and sqlite_temp_master

Error: querying sqlite_master and sqlite_temp_master

Error: invalid arguments: "%s". Enter ".help" for help

Error: invalid arguments: "%s". Enter ".help" for help

Error: cannot open pipe "%s"

Error: cannot open pipe "%s"

Error: cannot write to "%s"

Error: cannot write to "%s"

CREATE TABLE sqlite_master (

CREATE TABLE sqlite_master (

CREATE TEMP TABLE sqlite_temp_master (

CREATE TEMP TABLE sqlite_temp_master (

SELECT sql FROM (SELECT sql sql, type type, tbl_name tbl_name, name name, rowid x FROM sqlite_master UNION ALL SELECT sql, type, tbl_name, name, rowid FROM sqlite_temp_master) WHERE lower(tbl_name) LIKE shellstatic() AND type!='meta' AND sql NOTNULL ORDER BY substr(type,2,1), CASE type WHEN 'view' THEN rowid ELSE name END

SELECT sql FROM (SELECT sql sql, type type, tbl_name tbl_name, name name, rowid x FROM sqlite_master UNION ALL SELECT sql, type, tbl_name, name, rowid FROM sqlite_temp_master) WHERE lower(tbl_name) LIKE shellstatic() AND type!='meta' AND sql NOTNULL ORDER BY substr(type,2,1), CASE type WHEN 'view' THEN rowid ELSE name END

SELECT sql FROM (SELECT sql sql, type type, tbl_name tbl_name, name name, rowid x FROM sqlite_master UNION ALL SELECT sql, type, tbl_name, name, rowid FROM sqlite_temp_master) WHERE type!='meta' AND sql NOTNULL AND name NOT LIKE 'sqlite_%'ORDER BY substr(type,2,1), CASE type WHEN 'view' THEN rowid ELSE name END

SELECT sql FROM (SELECT sql sql, type type, tbl_name tbl_name, name name, rowid x FROM sqlite_master UNION ALL SELECT sql, type, tbl_name, name, rowid FROM sqlite_temp_master) WHERE type!='meta' AND sql NOTNULL AND name NOT LIKE 'sqlite_%'ORDER BY substr(type,2,1), CASE type WHEN 'view' THEN rowid ELSE name END

%9.9s: %s

%9.9s: %s

SELECT name FROM sqlite_master WHERE type IN ('table','view') AND name NOT LIKE 'sqlite_%%' AND name LIKE ?1

SELECT name FROM sqlite_master WHERE type IN ('table','view') AND name NOT LIKE 'sqlite_%%' AND name LIKE ?1

%z UNION ALL SELECT 'temp.' || name FROM sqlite_temp_master WHERE type IN ('table','view') AND name NOT LIKE 'sqlite_%%' AND name LIKE ?1

%z UNION ALL SELECT 'temp.' || name FROM sqlite_temp_master WHERE type IN ('table','view') AND name NOT LIKE 'sqlite_%%' AND name LIKE ?1

%z UNION ALL SELECT '%q.' || name FROM "%w".sqlite_master WHERE type IN ('table','view') AND name NOT LIKE 'sqlite_%%' AND name LIKE ?1

%z UNION ALL SELECT '%q.' || name FROM "%w".sqlite_master WHERE type IN ('table','view') AND name NOT LIKE 'sqlite_%%' AND name LIKE ?1

%s%-*s

%s%-*s

iskeyword

iskeyword

ambiguous option name: "%s"

ambiguous option name: "%s"

Error: invalid testctrl option: %s

Error: invalid testctrl option: %s

%d (0xx)

%d (0xx)

Error: testctrl %s takes a single int option

Error: testctrl %s takes a single int option

Error: testctrl %s takes no options

Error: testctrl %s takes no options

Error: testctrl %s takes a single unsigned int option

Error: testctrl %s takes a single unsigned int option

Error: CLI support for testctrl %s not implemented

Error: CLI support for testctrl %s not implemented

SQLite %s %s

SQLite %s %s

Error: unknown command or invalid arguments: "%s". Enter ".help" for help

Error: unknown command or invalid arguments: "%s". Enter ".help" for help

Error: near line %d:

Error: near line %d:

%s %s

%s %s

Error: incomplete SQL: %s

Error: incomplete SQL: %s

%s: Error: cannot locate your home directory

%s: Error: cannot locate your home directory

%s/.sqliterc

%s/.sqliterc

-- Loading resources from %s

-- Loading resources from %s

Usage: %s [OPTIONS] FILENAME [SQL]

Usage: %s [OPTIONS] FILENAME [SQL]

FILENAME is the name of an SQLite database. A new database is created

FILENAME is the name of an SQLite database. A new database is created

sqlite>

sqlite>

SQLite header and source version mismatch

SQLite header and source version mismatch

no such VFS: "%s"

no such VFS: "%s"

%s: Error: too many options: "%s"

%s: Error: too many options: "%s"

%s: Error: missing argument for option: %s

%s: Error: missing argument for option: %s

Error: unable to process SQL "%s"

Error: unable to process SQL "%s"

%s: Error: unknown option: %s

%s: Error: unknown option: %s

%s/.sqlite_history

%s/.sqlite_history

SQLite version %s %.19s

SQLite version %s %.19s

Enter ".help" for instructions

Enter ".help" for instructions

Enter SQL statements terminated with a ";"

Enter SQL statements terminated with a ";"

zcÁ

zcÁ

C:\PROGRA~1\COMMON~1\MICROS~1\DW\DW20.EXE

C:\PROGRA~1\COMMON~1\MICROS~1\DW\DW20.EXE

GetCPInfo

GetCPInfo

]

]

.text

.text

`.rdata

`.rdata

@.data

@.data

.reloc

.reloc

KERNEL32.DLL

KERNEL32.DLL

ole32.dll

ole32.dll

ffcookieextractor.dll

ffcookieextractor.dll

_getFirefoxCookie

_getFirefoxCookie

mscoree.dll

mscoree.dll

nKERNEL32.DLL

nKERNEL32.DLL

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

- floating point support not loaded

- floating point support not loaded

WUSER32.DLL

WUSER32.DLL

888816666554443

888816666554443

6666554443

6666554443

!6666554443

!6666554443

%AppData%\Mozilla\Firefox

%AppData%\Mozilla\Firefox

\profiles.ini

\profiles.ini

\cookies.sqlite

\cookies.sqlite

Kernel32.dll

Kernel32.dll

DW20.EXE_2176:

.text

.text

`.data

`.data

.cdata

.cdata

.rsrc

.rsrc

watson.microsoft.com

watson.microsoft.com

.mdmp

.mdmp

%s?szAppName=%S&szAppVer=%S&szAppStamp=%S&szModName=%S&szModVer=%S&szModStamp=%S&fDebug=%S&offset=%S

%s?szAppName=%S&szAppVer=%S&szAppStamp=%S&szModName=%S&szModVer=%S&szModStamp=%S&fDebug=%S&offset=%S

/dw/stagetwo.asp

/dw/stagetwo.asp

%s/%S/%S/%S/%S/%S/%S/%S/%S.htm

%s/%S/%S/%S/%S/%S/%S/%S/%S.htm

Failed to fill report params from generic params

Failed to fill report params from generic params

Not offering reporting

Not offering reporting

%s Mode

%s Mode

Failed to get a reporting destination

Failed to get a reporting destination

Nothing to report from queue

Nothing to report from queue

No reports left to send. Removing queue triggers and bailing.

No reports left to send. Removing queue triggers and bailing.

Failed to plug UI; LCID=%u

Failed to plug UI; LCID=%u

Ignoring %S due to unknown queue version

Ignoring %S due to unknown queue version

Reporting is disabled

Reporting is disabled

SignOff queue reporting is disabled

SignOff queue reporting is disabled

Queued Reporting Mode called but still want to report to the queue

Queued Reporting Mode called but still want to report to the queue

Bad queue type to report from

Bad queue type to report from

No reports for given queue mask - %u

No reports for given queue mask - %u

Invalid queue mask - %u

Invalid queue mask - %u

Suspending: Force cancel to queued reporting

Suspending: Force cancel to queued reporting

Suspending: Force cancel to network reporting

Suspending: Force cancel to network reporting

CreateWindowExA failed with %d.

CreateWindowExA failed with %d.

Application Error Reporting %d

Application Error Reporting %d

WatsonQueuedReportingInstanceVerification

WatsonQueuedReportingInstanceVerification

riched20.dll

riched20.dll

qMicrosoft\PCHealth\ErrorReporting\DW

qMicrosoft\PCHealth\ErrorReporting\DW

msaccess.exe

msaccess.exe

hXXp://watson.microsoft.com/dw/dcp.asp

hXXp://watson.microsoft.com/dw/dcp.asp

hXXp://watson.microsoft.com/dw/watsoninfo.asp

hXXp://watson.microsoft.com/dw/watsoninfo.asp

dwintl20.dll

dwintl20.dll

Launching lightweight browser with URL

Launching lightweight browser with URL

mshtml.dll

mshtml.dll

Not reporting

Not reporting

Reporting

Reporting

DWBypassQueue

DWBypassQueue

DWExplainerURL

DWExplainerURL

DWNoSignOffQueueReporting

DWNoSignOffQueueReporting

DWAlwaysReport

DWAlwaysReport

DWReporteeName

DWReporteeName

DWURLLaunch

DWURLLaunch

DWNoExternalURL

DWNoExternalURL

DWStressReport

DWStressReport

ole32.dll

ole32.dll

imm32.dll

imm32.dll

BTLog.dll

BTLog.dll

Microsoft\PCHealth\ErrorReporting\DW

Microsoft\PCHealth\ErrorReporting\DW

HKLM\Software\Microsoft\Windows NT\CurrentVersion\AeDebug\Debugger

HKLM\Software\Microsoft\Windows NT\CurrentVersion\AeDebug\Debugger

hXXp://

hXXp://

hXXps://

hXXps://

Software\Microsoft\PCHealth\ErrorReporting\DW\Debug

Software\Microsoft\PCHealth\ErrorReporting\DW\Debug

%s\%s

%s\%s

https

https

DwBTLog.log

DwBTLog.log

Failed to get minidump for %S!

Failed to get minidump for %S!

szAppName=%s

szAppName=%s

szAppVer=%d.%d.%d.%d

szAppVer=%d.%d.%d.%d

szAppStamp=x

szAppStamp=x

szModName=%s

szModName=%s

szModVer=%d.%d.%d.%d

szModVer=%d.%d.%d.%d

szModStamp=x

szModStamp=x

fDebug=%s

fDebug=%s

offset=x

offset=x

microsoft.com

microsoft.com

.msn.com

.msn.com

.microsoft.com

.microsoft.com

d:d:d d-d-d

d:d:d d-d-d

/dw/generictwo.asp

/dw/generictwo.asp

kernel32.dll

kernel32.dll

psapi.dll

psapi.dll

mso.dll

mso.dll

MsoDWRecover%x

MsoDWRecover%x

MsoDWHang%x

MsoDWHang%x

Launching browser with URL

Launching browser with URL

shell32.dll

shell32.dll

%d.%d.%d.%d

%d.%d.%d.%d

%d.%d.%d.%d.x.%d.%d

%d.%d.%d.%d.x.%d.%d

shfolder.dll

shfolder.dll

unknown.sig

unknown.sig

%s dw20.exe %d.%d.%d.%d

%s dw20.exe %d.%d.%d.%d

RegKey=

RegKey=

ResponseURL=

ResponseURL=

URLLaunch=

URLLaunch=

NoExternalURL=

NoExternalURL=

%s:(%s) XX

%s:(%s) XX

%s:(%s) X

%s:(%s) X

%s:(%s)

%s:(%s)

%s:(%s) %s

%s:(%s) %s

registry.txt

registry.txt

wql.txt

wql.txt

Windows NT Version %d.%d Build: %d

Windows NT Version %d.%d Build: %d

Stage 1 server response: %s

Stage 1 server response: %s

Stage 2 server response: %s

Stage 2 server response: %s

Stage 4 server response: %s

Stage 4 server response: %s

StatusCode: %d

StatusCode: %d

Opening server: %s

Opening server: %s

HttpOpen failed.

HttpOpen failed.

Opening %s Request:

Opening %s Request:

HTTPS

HTTPS

HttpSend Failed.

HttpSend Failed.

HttpWrite Failed, GLE=%d.

HttpWrite Failed, GLE=%d.

HttpEndReq failed.

HttpEndReq failed.

Count filename length greater than MAX_PATH, can't report.

Count filename length greater than MAX_PATH, can't report.

Filesystem reporting: count file updated

Filesystem reporting: count file updated

FReportToQueue: GetLastError=%u

FReportToQueue: GetLastError=%u

FReportToQueue: File Tree Root does not exist: %S

FReportToQueue: File Tree Root does not exist: %S

Failed to add heap file to cab: %S

Failed to add heap file to cab: %S

memory.dmp

memory.dmp

mdmpmem.hdmp

mdmpmem.hdmp

version.txt

version.txt

Network reporting complete.

Network reporting complete.

Network reporting failed.

Network reporting failed.

Application Error Reporting Transfer %d

Application Error Reporting Transfer %d

Filesystem reporting complete

Filesystem reporting complete

Filesystem reporting: cab successfully written

Filesystem reporting: cab successfully written

Filesystem reporting: could not find/create directory for cab/count

Filesystem reporting: could not find/create directory for cab/count

Filesystem reporting: redirection failure, too many redirects

Filesystem reporting: redirection failure, too many redirects

Filesystem reporting: redirection failure, no previous roots

Filesystem reporting: redirection failure, no previous roots

Filesystem reporting: improper file tree root

Filesystem reporting: improper file tree root

Filesystem reporting cancelled

Filesystem reporting cancelled

Filesystem reporting: file tree root is too long

Filesystem reporting: file tree root is too long

Record: 0xxx

Record: 0xxx

Address: 0xxx

Address: 0xxx

Code: 0xx

Code: 0xx

Flags: 0xx

Flags: 0xx

x:x

x:x

(%d.%d:%d.%d)

(%d.%d:%d.%d)

Checksum: 0xx

Checksum: 0xx

Time Stamp: 0xx

Time Stamp: 0xx

Image Base: 0xx

Image Base: 0xx

Image Size: 0xx

Image Size: 0xx

Module %d

Module %d

Windows NT %d.%d Build: %d

Windows NT %d.%d Build: %d

CPU AMD Feature Code: X

CPU AMD Feature Code: X

CPU Version: X CPU Feature Code: X

CPU Version: X CPU Feature Code: X

CPU Vendor Code: X - X - X

CPU Vendor Code: X - X - X

0xx:

0xx:

0xx: x x x x

0xx: x x x x

EFlags: 0xx ESP: 0xx SegSs: 0xx

EFlags: 0xx ESP: 0xx SegSs: 0xx

EIP: 0xx EBP: 0xx SegCs: 0xx

EIP: 0xx EBP: 0xx SegCs: 0xx

EBX: 0xx ECX: 0xx EDX: 0xx

EBX: 0xx ECX: 0xx EDX: 0xx

EDI: 0xx ESI: 0xx EAX: 0xx

EDI: 0xx ESI: 0xx EAX: 0xx

Thread ID: 0xx

Thread ID: 0xx

Thread %d

Thread %d

Memory Range %d

Memory Range %d

Software\Microsoft\PCHealth\ErrorReporting\DW

Software\Microsoft\PCHealth\ErrorReporting\DW

OkToReportFromTheseQueues

OkToReportFromTheseQueues

SOFTWARE\Microsoft\Windows\CurrentVersion\Run

SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Failed to obtain queue mutex. GetLastError=%u

Failed to obtain queue mutex. GetLastError=%u

FGetQueueMutex: WaitForSingleObject returned %u

FGetQueueMutex: WaitForSingleObject returned %u

Failed to open or create queue mutex. GetLastError=%u

Failed to open or create queue mutex. GetLastError=%u

Failed queued reporting pester check

Failed queued reporting pester check

Failed to create run reg key

Failed to create run reg key

Persistent run key is set.

Persistent run key is set.

CoInitializeEx() returned 0x%x.

CoInitializeEx() returned 0x%x.

Reporting to Admin Queue

Reporting to Admin Queue

Reporting to Regular Queue

Reporting to Regular Queue

Reporting to SignOff Queue

Reporting to SignOff Queue

Reporting to Headless Queue

Reporting to Headless Queue

Reporting from Regular Queue

Reporting from Regular Queue

Reporting from SignOff Queue

Reporting from SignOff Queue

Reporting from Headless Queue

Reporting from Headless Queue

OOM Failed to alloc QueuedReportData

OOM Failed to alloc QueuedReportData

FAllocSD: GetLastError=%u

FAllocSD: GetLastError=%u

%s%s%s

%s%s%s

FEnsureQueueDirW: GetLastError=%u

FEnsureQueueDirW: GetLastError=%u

Failed to write snt. GLE: %u

Failed to write snt. GLE: %u

Failed to create snt. GLE: %u

Failed to create snt. GLE: %u

Failed to set info; bad queue type: %u

Failed to set info; bad queue type: %u

Failed to open reg key for queue

Failed to open reg key for queue

Failed to get windows folder path for queue: %u

Failed to get windows folder path for queue: %u

Failed to move instr file from queue A to queue B - %u

Failed to move instr file from queue A to queue B - %u

Failed to move cab file from queue A to queue B - %u

Failed to move cab file from queue A to queue B - %u

Did not move any reports from admin q to user q

Did not move any reports from admin q to user q

Did not move any reports from user q to headless q

Did not move any reports from user q to headless q

Queue types that have reports: %u

Queue types that have reports: %u

Setting triggerAtConnectionMade to: %u

Setting triggerAtConnectionMade to: %u

Setting triggerAtLogon to: %u

Setting triggerAtLogon to: %u

Setting the queue trigger based upon: %u

Setting the queue trigger based upon: %u

SUCCESS adding report to queue

SUCCESS adding report to queue

Launched (%S)

Launched (%S)

Failed to store the SensSubscription. hr: %d

Failed to store the SensSubscription. hr: %d

failed to allocate PROGID string: %S

failed to allocate PROGID string: %S

Failed putting SubscriberInterface. hr: %d

Failed putting SubscriberInterface. hr: %d

Failed putting PerUser. hr: %d

Failed putting PerUser. hr: %d

Failed putting Enabled. hr: %d

Failed putting Enabled. hr: %d

Failed putting MachineName. hr: %d

Failed putting MachineName. hr: %d

Failed putting OwnerSID. hr: %d

Failed putting OwnerSID. hr: %d

Failed putting Description. hr: %d

Failed putting Description. hr: %d

Failed putting InterfaceID. hr: %d

Failed putting InterfaceID. hr: %d

Failed putting EventClassID. hr: %d

Failed putting EventClassID. hr: %d

Failed putting MethodName. hr: %d

Failed putting MethodName. hr: %d

Failed putting SubscriptionName. hr: %d

Failed putting SubscriptionName. hr: %d

Failed putting PublisherID. hr: %d

Failed putting PublisherID. hr: %d

Failed putting SubscriberCLSID. hr: %d

Failed putting SubscriberCLSID. hr: %d

Failed putting SubscriptionID. hr: %d

Failed putting SubscriptionID. hr: %d

Failed CoCreateInstance on EventSubscription. hr: %d

Failed CoCreateInstance on EventSubscription. hr: %d

Failed to remove the SensSubscription. hr: %d

Failed to remove the SensSubscription. hr: %d

failed to allocate query string: %S

failed to allocate query string: %S

Failed CoCreateInstance on EventSystem. hr: %d

Failed CoCreateInstance on EventSystem. hr: %d

SENS: StringFromIID() returned

SENS: StringFromIID() returned

DWSHARED: SysAllocString(%s) failed!

DWSHARED: SysAllocString(%s) failed!

Failed to subscribe subscription %u. hr: %d

Failed to subscribe subscription %u. hr: %d

Failed to get data for subscription %u. hr: %d

Failed to get data for subscription %u. hr: %d

Failed to query install reg key

Failed to query install reg key

Failed to open install reg key

Failed to open install reg key

Software\Microsoft\PCHealth\ErrorReporting\DW\Installed

Software\Microsoft\PCHealth\ErrorReporting\DW\Installed

HKEY_USERS\

HKEY_USERS\

HKEY_CURRENT_CONFIG\

HKEY_CURRENT_CONFIG\

HKEY_CLASSES_ROOT\

HKEY_CLASSES_ROOT\

HKEY_LOCAL_MACHINE\

HKEY_LOCAL_MACHINE\

HKEY_CURRENT_USER\

HKEY_CURRENT_USER\

initing CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d

initing CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d

freeing CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d

freeing CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d

0addref CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d

0addref CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d

QIing CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d

QIing CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d

releasing CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d

releasing CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d

deleting CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d

deleting CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d

creating CDwAccessible: hwnd %x, idc %d

creating CDwAccessible: hwnd %x, idc %d

WriteAtOffset.Write(0x%x) failed, 0xx

WriteAtOffset.Write(0x%x) failed, 0xx

WriteAtOffset.Seek(0x%x) failed, 0xx

WriteAtOffset.Seek(0x%x) failed, 0xx

WriteMemoryFromProcess.Read(0x%I64x, 0x%x) failed, 0xx

WriteMemoryFromProcess.Read(0x%I64x, 0x%x) failed, 0xx

WriteStringToPool.Write(0x%x) failed, 0xx

WriteStringToPool.Write(0x%x) failed, 0xx

WriteFunctionTable.RawEntries.Write(0x%x) failed, 0xx

WriteFunctionTable.RawEntries.Write(0x%x) failed, 0xx

WriteFunctionTable.RawTable.Write(0x%x) failed, 0xx

WriteFunctionTable.RawTable.Write(0x%x) failed, 0xx

WriteFunctionTableList.DumpTable.Write(0x%x) failed, 0xx

WriteFunctionTableList.DumpTable.Write(0x%x) failed, 0xx

WriteFunctionTableList.Seek(0x%x) failed, 0xx

WriteFunctionTableList.Seek(0x%x) failed, 0xx

WriteDirectoryEntry.Write(0x%x) failed, 0xx

WriteDirectoryEntry.Write(0x%x) failed, 0xx

Thread(0x%x) callback returned FALSE

Thread(0x%x) callback returned FALSE

WriteSystemInfo.GetOsCsdString failed, 0xx

WriteSystemInfo.GetOsCsdString failed, 0xx

WriteSystemInfo.GetCpuInfo failed, 0xx

WriteSystemInfo.GetCpuInfo failed, 0xx

CalculateSizeForSystemInfo.GetOsCsdString failed, 0xx

CalculateSizeForSystemInfo.GetOsCsdString failed, 0xx

WriteHeader.GetCurrentTimeDate failed, 0xx

WriteHeader.GetCurrentTimeDate failed, 0xx

WriteDirectoryTable.Seek(0x%x) failed, 0xx

WriteDirectoryTable.Seek(0x%x) failed, 0xx

WriteMemoryInfo.Write(0x%x) failed, 0xx

WriteMemoryInfo.Write(0x%x) failed, 0xx

WriteMemoryInfo.QueryVirtual(0x%I64x) failed, 0xx

WriteMemoryInfo.QueryVirtual(0x%I64x) failed, 0xx

WriteFullMemory virtual memory layout changed, retries %d, 0x%I64x (0x%I64x:0x%I64x) vs. 0x%I64x (0x%I64x:0x%I64x)

WriteFullMemory virtual memory layout changed, retries %d, 0x%I64x (0x%I64x:0x%I64x) vs. 0x%I64x (0x%I64x:0x%I64x)

WriteFullMemory.Memory.Write(0x%x) failed, 0xx

WriteFullMemory.Memory.Write(0x%x) failed, 0xx

WriteFullMemory.Memory.Read(0x%I64x, 0x%x) failed, retries %d, 0xx

WriteFullMemory.Memory.Read(0x%I64x, 0x%x) failed, retries %d, 0xx

WriteFullMemory.QueryVirtual(0x%I64x) for data failed, 0xx

WriteFullMemory.QueryVirtual(0x%I64x) for data failed, 0xx

WriteFullMemory.Desc.Write(0x%x) failed, 0xx

WriteFullMemory.Desc.Write(0x%x) failed, 0xx

WriteFullMemory.QueryVirtual(0x%I64x) for info failed, 0xx

WriteFullMemory.QueryVirtual(0x%I64x) for info failed, 0xx

Kernel minidump write failed, 0xx

Kernel minidump write failed, 0xx

MarshalExceptionPointers.CxRecord.Read(0x%I64x, 0x%x) failed, 0xx

MarshalExceptionPointers.CxRecord.Read(0x%I64x, 0x%x) failed, 0xx

MarshalExceptionPointers.ExRecord.Read(0x%I64x, 0x%x) failed, 0xx

MarshalExceptionPointers.ExRecord.Read(0x%I64x, 0x%x) failed, 0xx

Invalid exception record parameter count (0x%x)

Invalid exception record parameter count (0x%x)

Invalid exception record size (0x%x)

Invalid exception record size (0x%x)

Invalid CPU type (0x%x)

Invalid CPU type (0x%x)

Invalid function table size (0x%x)

Invalid function table size (0x%x)

GetSystemType.GetOsInfo failed, 0xx

GetSystemType.GetOsInfo failed, 0xx

GetSystemType.GetCpuType failed, 0xx

GetSystemType.GetCpuType failed, 0xx

Write.Start failed, 0xx

Write.Start failed, 0xx

Dump type requires streaming but output provider does not support streaming

Dump type requires streaming but output provider does not support streaming

Invalid dump type 0x%x

Invalid dump type 0x%x

dbghelp.dll

dbghelp.dll

Alloc(0x%x) failed

Alloc(0x%x) failed

Thread(0x%x) will not be included

Thread(0x%x) will not be included

GenGetImageSections.Section.Read(0x%I64x, 0x%x) failed, 0xx

GenGetImageSections.Section.Read(0x%I64x, 0x%x) failed, 0xx

GenGetImageSections.GenImageNtHeader(0x%I64x) failed

GenGetImageSections.GenImageNtHeader(0x%I64x) failed

GenGetImageSections.Read(0x%I64x, 0x%x) failed, 0xx

GenGetImageSections.Read(0x%I64x, 0x%x) failed, 0xx

0GenAllocateThreadObject.GetTebInfo(0x%x) failed, 0xx

0GenAllocateThreadObject.GetTebInfo(0x%x) failed, 0xx

GenAllocateThreadObject.GetContext(0x%x) failed, 0xx

GenAllocateThreadObject.GetContext(0x%x) failed, 0xx

GenAllocateThreadObject.Open(0x%x) failed, 0xx

GenAllocateThreadObject.Open(0x%x) failed, 0xx

GenReadTlsDirectory.Index(0x%I64x, %ws) failed, 0xx

GenReadTlsDirectory.Index(0x%I64x, %ws) failed, 0xx

GenReadTlsDirectory(0x%I64x, %ws) unknown machine 0x%x

GenReadTlsDirectory(0x%I64x, %ws) unknown machine 0x%x

GenReadTlsDirectory.Read(0x%I64x, %ws) failed, 0xx

GenReadTlsDirectory.Read(0x%I64x, %ws) failed, 0xx

GenAllocateModuleObject.GenDebugRecord(0x%I64x, %ws) failed, 0xx

GenAllocateModuleObject.GenDebugRecord(0x%I64x, %ws) failed, 0xx

GenAllocateModuleObject.GenImageNtHeader(0x%I64x, %ws) failed, 0xx

GenAllocateModuleObject.GenImageNtHeader(0x%I64x, %ws) failed, 0xx

GenAllocateModuleObject.GetImageHeaderInfo(0x%I64x, %ws) failed, 0xx

GenAllocateModuleObject.GetImageHeaderInfo(0x%I64x, %ws) failed, 0xx

GenAllocateModuleObject.GetVersion(0x%I64x, %ws) failed, 0xx

GenAllocateModuleObject.GetVersion(0x%I64x, %ws) failed, 0xx

GenAllocateProcessObject.GetPeb(0x%x) failed, 0xx

GenAllocateProcessObject.GetPeb(0x%x) failed, 0xx

GenIncludeUnwindInfoMemory.Enum(0x%I64x, 0x%x) failed, 0xx

GenIncludeUnwindInfoMemory.Enum(0x%I64x, 0x%x) failed, 0xx

GenGenTebMemory.TLS(0x%I64x) failed, 0xx

GenGenTebMemory.TLS(0x%I64x) failed, 0xx

GenScanAddressSpace.QueryVirtual(0x%I64x) failed, 0xx

GenScanAddressSpace.QueryVirtual(0x%I64x) failed, 0xx

0GenGetAuxMemory(%ws) failed, 0xx

0GenGetAuxMemory(%ws) failed, 0xx

GenGetProcessInfo.EnumUnloadedModules(0x%x) failed, 0xx

GenGetProcessInfo.EnumUnloadedModules(0x%x) failed, 0xx

GenGetProcessInfo.EnumUnloadedModules(0x%x) looped

GenGetProcessInfo.EnumUnloadedModules(0x%x) looped

GenGetProcessInfo.EnumFunctionTableEntries(0x%I64x, 0x%x) failed, 0xx

GenGetProcessInfo.EnumFunctionTableEntries(0x%I64x, 0x%x) failed, 0xx

GenGetProcessInfo.EnumFunctionTables(0x%x) failed, 0xx

GenGetProcessInfo.EnumFunctionTables(0x%x) failed, 0xx

GenGetProcessInfo.EnumFunctionTables(0x%x) looped

GenGetProcessInfo.EnumFunctionTables(0x%x) looped

GenGetProcessInfo.EnumModules(0x%x) failed, 0xx

GenGetProcessInfo.EnumModules(0x%x) failed, 0xx

GenGetProcessInfo.EnumModules(0x%x) looped

GenGetProcessInfo.EnumModules(0x%x) looped

GenGetProcessInfo.EnumThreads(0x%x) failed, 0xx

GenGetProcessInfo.EnumThreads(0x%x) failed, 0xx

GenGetProcessInfo.EnumThreads(0x%x) looped

GenGetProcessInfo.EnumThreads(0x%x) looped

GenGetProcessInfo.Start(0x%x) failed, 0xx

GenGetProcessInfo.Start(0x%x) failed, 0xx

GenWriteHandleData.Desc.Write(0x%x) failed, 0xx

GenWriteHandleData.Desc.Write(0x%x) failed, 0xx

GenWriteHandleData.Header.Write(0x%x) failed, 0xx

GenWriteHandleData.Header.Write(0x%x) failed, 0xx

GenWriteHandleData.ObjectName.Write(0x%x) failed, 0xx

GenWriteHandleData.ObjectName.Write(0x%x) failed, 0xx

GenWriteHandleData.ObjectNameLen.Write(0x%x) failed, 0xx

GenWriteHandleData.ObjectNameLen.Write(0x%x) failed, 0xx

GenWriteHandleData.TypeName.Write(0x%x) failed, 0xx

GenWriteHandleData.TypeName.Write(0x%x) failed, 0xx

GenWriteHandleData.TypeNameLen.Write(0x%x) failed, 0xx

GenWriteHandleData.TypeNameLen.Write(0x%x) failed, 0xx

GenWriteHandleData.Start(0x%x) failed, 0xx

GenWriteHandleData.Start(0x%x) failed, 0xx

GenWriteHandleData.Seek(0x%x) failed, 0xx

GenWriteHandleData.Seek(0x%x) failed, 0xx

Software\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls

Software\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls

Software\Microsoft\Windows NT\CurrentVersion\KnownManagedDebuggingDlls

Software\Microsoft\Windows NT\CurrentVersion\KnownManagedDebuggingDlls

version.dll

version.dll

ntdll.dll

ntdll.dll

%$%,%4%

%$%,%4%

S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%

S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%

b%c%d%e%f%g%h%i%j%k%l%

b%c%d%e%f%g%h%i%j%k%l%

!"#$%&'()* ,-./0123456789:;

!"#$%&'()* ,-./0123456789:;

!!!!2222

!!!!2222

%%%f||||

%%%f||||

!!!!2222||||

!!!!2222||||

!"#$%&'(

!"#$%&'(

'()* ,-./0

'()* ,-./0

&'()* ,-./

&'()* ,-./

&'()* ,-./012345

&'()* ,-./012345

3456789

3456789

.ASex

.ASex

!"#$%&'()* ,-./012

!"#$%&'()* ,-./012

!"#$%&'()

!"#$%&'()

?msodatad.dat

?msodatad.dat

msodatalast.dat

msodatalast.dat

Unicows.dll

Unicows.dll

Kernel32.dll

Kernel32.dll

SHLWAPI.DLL

SHLWAPI.DLL

GDI32.DLL

GDI32.DLL

wintrust.dll

wintrust.dll

1108160

1108160

0u.hN

0u.hN

0SSh

0SSh

t.WWWj

t.WWWj

PSSh07

PSSh07

t5SSh(

t5SSh(

PSSSSSSh

PSSSSSSh

0SSSSh

0SSSSh

ADVAPI32.dll

ADVAPI32.dll

COMCTL32.dll

COMCTL32.dll

GDI32.dll

GDI32.dll

KERNEL32.dll

KERNEL32.dll

OLEACC.dll

OLEACC.dll

OLEAUT32.dll

OLEAUT32.dll

MSVCRT.dll

MSVCRT.dll

RPCRT4.dll

RPCRT4.dll

SHELL32.dll

SHELL32.dll

SHLWAPI.dll

SHLWAPI.dll

urlmon.dll

urlmon.dll

USER32.dll

USER32.dll

VERSION.dll

VERSION.dll

WININET.dll

WININET.dll

RegCloseKey

RegCloseKey

RegOpenKeyExA

RegOpenKeyExA

RegCreateKeyExA

RegCreateKeyExA

ReportEventA

ReportEventA

ReportEventW

ReportEventW

RegEnumKeyExA

RegEnumKeyExA

RegQueryInfoKeyA

RegQueryInfoKeyA

RegQueryInfoKeyW

RegQueryInfoKeyW

GetProcessHeap

GetProcessHeap

GetSystemWindowsDirectoryW

GetSystemWindowsDirectoryW

_amsg_exit

_amsg_exit

_acmdln

_acmdln

ShellExecuteExA

ShellExecuteExA

UrlGetPartA

UrlGetPartA

CreateURLMoniker

CreateURLMoniker

CreateDialogIndirectParamA

CreateDialogIndirectParamA

EnumWindows

EnumWindows

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestExA

HttpSendRequestExA

HttpOpenRequestA

HttpOpenRequestA

InternetCanonicalizeUrlA

InternetCanonicalizeUrlA

InternetCrackUrlA

InternetCrackUrlA

HttpEndRequestA

HttpEndRequestA

dw20.pdb

dw20.pdb

\devsplab1\otools\BBT_TEMP\DW20O.pdb

\devsplab1\otools\BBT_TEMP\DW20O.pdb

winword.exe

winword.exe

wwordlt.exe

wwordlt.exe

excel.exe

excel.exe

excellt.exe

excellt.exe

mspub.exe

mspub.exe

frontpg.exe

frontpg.exe

outlook.exe

outlook.exe

powerpnt.exe

powerpnt.exe

powpntlt.exe

powpntlt.exe

onenote.exe

onenote.exe

infopath.exe

infopath.exe

winproj.exe

winproj.exe

ois.exe

ois.exe

visio.exe

visio.exe

`!`'`)` `

`!`'`)` `

e%f-f|3 f'f/f

e%f-f|3 f'f/f

]!^"^#^ ^$^

]!^"^#^ ^$^

t.uGuHu

t.uGuHu

x4x7x%x-x x

x4x7x%x-x x

h&h(h.hMh:h%h h,k/k-k1k4kmk

h&h(h.hMh:h%h h,k/k-k1k4kmk

k%lzmcmdmvm

k%lzmcmdmvm

^Q]Q~NzP}P\PGPCPLPZPIPePvPNPUPuPtPwPOP

^Q]Q~NzP}P\PGPCPLPZPIPePvPNPUPuPtPwPOP

]8^6^3^7^

]8^6^3^7^

ichczc]eVeQeYeWe_UOeXeUeTe

ichczc]eVeQeYeWe_UOeXeUeTe

{1{ {-{/{2{8{

{1{ {-{/{2{8{

r6s%s4s)s:t*t3t"t%t5t6t4t/t

r6s%s4s)s:t*t3t"t%t5t6t4t/t

t&t(t%u&ukuju

t&t(t%u&ukuju

WHX%X

WHX%X

`IaJa aEa6a2a.aFa/aOa)a@a bh

`IaJa aEa6a2a.aFa/aOa)a@a bh

d@d%d'd

d@d%d'd

duewexei

duewexei

kCpDpJpHpIpEpFp

kCpDpJpHpIpEpFp

S$S%S&S'S(S)S S,S.S2S3S5S6S8S:S;SBSFSKSNSOSPSUSVSXSYS[S]S_SbSdSeSgShSiSjSkSmStSvSzS}S~S

S$S%S&S'S(S)S S,S.S2S3S5S6S8S:S;SBSFSKSNSOSPSUSVSXSYS[S]S_SbSdSeSgShSiSjSkSmStSvSzS}S~S

U U!U"U#U$U%U(U)U U:U=U?UBUGUIULUSUTUXUYUZU[U]U`UgUhUiUkUlUmUnUoUpUqUrUsUtUxUyUzU

U U!U"U#U$U%U(U)U U:U=U?UBUGUIULUSUTUXUYUZU[U]U`UgUhUiUkUlUmUnUoUpUqUrUsUtUxUyUzU

c c!c"c#c$c%c&c'c.c0c1c5c7c?cRcSc[c\c]c^c_c`cacbcccdcfcjclcsctcyc~c

c c!c"c#c$c%c&c'c.c0c1c5c7c?cRcSc[c\c]c^c_c`cacbcccdcfcjclcsctcyc~c

m!m#m$m&mCmDmEmFmGmHmImJmKmLmMmNmOmPmQmRmSmTmUmVmWm[m\m]mkmqmrmsm

m!m#m$m&mCmDmEmFmGmHmImJmKmLmMmNmOmPmQmRmSmTmUmVmWm[m\m]mkmqmrmsm

nRsSsh

nRsSsh

evg%f

evg%f

m.tRa

m.tRa

gtr%x

gtr%x

Q%SKg

Q%SKg

f.ebp>QI

f.ebp>QI

y.yxT

y.yxT

fn:q%uN

fn:q%uN

aw.Toiz

aw.Toiz

RMeXe

RMeXe

S#S$S%S;ScSdSrSsStSuS

S#S$S%S;ScSdSrSsStSuS

`!`"`&`'`)`*` `,`-`.`/`0`2`3`4`5`6`:`=`>`?`

`!`"`&`'`)`*` `,`-`.`/`0`2`3`4`5`6`:`=`>`?`

^ ^!^"^#^$^%^&^'^.^}^

^ ^!^"^#^$^%^&^'^.^}^

c c!c"c#c$c%c&c'c*c7c:c;cSc[c1e?e@eAeBeCeDeEe

c c!c"c#c$c%c&c'c*c7c:c;cSc[c1e?e@eAeBeCeDeEe

f f!f"f#f$f%f&f'f(f)f*f f,f-f

f f!f"f#f$f%f&f'f(f)f*f f,f-f

m m!m"m#m$m%m&m'm(m)m*m m,m-m.m1m2m3m4m5m6m7m8m9m:m;mm?m@mBmCmDmGmHmImJmKmLmMmNmOmPmQmRmSmTmUm

m m!m"m#m$m%m&m'm(m)m*m m,m-m.m1m2m3m4m5m6m7m8m9m:m;mm?m@mBmCmDmGmHmImJmKmLmMmNmOmPmQmRmSmTmUm

u u-u.uFuGuHuIuJuKuLuMuNuOuPuQuRuSu

u u-u.uFuGuHuIuJuKuLuMuNuOuPuQuRuSu

U U!U"U#U$U%U&U'U(U4UJU

U U!U"U#U$U%U&U'U(U4UJU

](^)^*^ ^,^-^/^0^1^

](^)^*^ ^,^-^/^0^1^

m/mAmFmVmWmXmYmZm[m\m]m^m_m`mambmcmdmemfmgmhmimjmkmlmmmnmompmqmrmsmtmumvmwmxmymzm{m|m}m~m

m/mAmFmVmWmXmYmZm[m\m]m^m_m`mambmcmdmemfmgmhmimjmkmlmmmnmompmqmrmsmtmumvmwmxmymzm{m|m}m~m

x x!x"x#x$x%x'x(x)x*x x,x.x/x0x1x2x3x4x5x6x7x8x9x:x;xx?x@xAxXy_yaycydyeygyiyjykylynyoy

x x!x"x#x$x%x'x(x)x*x x,x.x/x0x1x2x3x4x5x6x7x8x9x:x;xx?x@xAxXy_yaycydyeygyiyjykylynyoy

} }!}"}#}$}%}&}'}

} }!}"}#}$}%}&}'}

] ]!]"]#]$]%]&]'](])]*] ],]-].]/]0]

] ]!]"]#]$]%]&]'](])]*] ],]-].]/]0]

]2^3^4^5^6^7^8^9^:^;^^

]2^3^4^5^6^7^8^9^:^;^^

cMeNeOePeQeReSeTeUeWeXeYeZe[e]ebe

cMeNeOePeQeReSeTeUeWeXeYeZe[e]ebe

X X!X"X#X$X%X&X'X(X)X*X X,X-X.X/X0X1X3X4X6X7X8X9X:X;XX?X@XAXBXCXDXEXFXGXHXJXTX_X`XfXmX

X X!X"X#X$X%X&X'X(X)X*X X,X-X.X/X0X1X3X4X6X7X8X9X:X;XX?X@XAXBXCXDXEXFXGXHXJXTX_X`XfXmX

d%d-d0d=dRdad2e\e^e_e`eaecedeeefegeheiejele

d%d-d0d=dRdad2e\e^e_e`eaecedeeefegeheiejele

s"s#s$s%s&s(s)s,s-s/s0s1s2s3s4s5s6s8s9s>s@sGs

s"s#s$s%s&s(s)s,s-s/s0s1s2s3s4s5s6s8s9s>s@sGs

u$u%u&u/ujukulumunuouqurusutu

u$u%u&u/ujukulumunuouqurusutu

duewexeyeze{e

duewexeyeze{e

~ ~!~"~#~$~%~&~'~(~*~ ~-~8~:~0

~ ~!~"~#~$~%~&~'~(~*~ ~-~8~:~0

| |!|"|#|$|%|&|(|)|*|-|.|/|0|1|2|6|

| |!|"|#|$|%|&|(|)|*|-|.|/|0|1|2|6|

{3~3}3|3

{3~3}3|3

eZl%u

eZl%u

Q.YeY

Q.YeY

R:\Sg|p5rL

R:\Sg|p5rL

e$e#e e4e5e7e6e8eKuHeVeUeMeXe^e]erexei

e$e#e e4e5e7e6e8eKuHeVeUeMeXe^e]erexei

s4s/s)s%s>sNsOs

s4s/s)s%s>sNsOs

s&t*t)t.tbt

s&t*t)t.tbt

2%2.bx

2%2.bx

{ | }9},

{ | }9},

d6exe9j

d6exe9j

]%sOu4](n

]%sOu4](n

m.t.zB}

m.t.zB}

w%xIyWy

w%xIyWy

^vcÓv

^vcÓv

%f?iCt

%f?iCt

U>_.lE

U>_.lE

f.ebp

f.ebp

.nrR=

.nrR=

{fn:q%uN

{fn:q%uN

crys.exe

crys.exe

name="Microsoft.Windows.ErrorReporter"

name="Microsoft.Windows.ErrorReporter"

version="5.1.0.0"

version="5.1.0.0"

publicKeyToken="6595b64144ccf1df" />

publicKeyToken="6595b64144ccf1df" />

Windows Error Reporting

Windows Error Reporting

name="Microsoft.Windows.Common-Controls"

name="Microsoft.Windows.Common-Controls"

version="6.0.0.0"

version="6.0.0.0"

publicKeyToken="6595b64144ccf1df"

publicKeyToken="6595b64144ccf1df"

1%s\%s\%s\%s\%s\%s\%s\%s

1%s\%s\%s\%s\%s\%s\%s\%s

AppName: %s AppVer: %s AppStamp:%s

AppName: %s AppVer: %s AppStamp:%s

ModName: %s ModVer: %s ModStamp:%s

ModName: %s ModVer: %s ModStamp:%s

fDebug: %s Offset: %s

fDebug: %s Offset: %s

Main_AlwaysReportBtn=

Main_AlwaysReportBtn=

Main_NoReportBtn=

Main_NoReportBtn=

Main_ReportBtn=

Main_ReportBtn=

General_Reportee=

General_Reportee=

CheckBoxRegKey=

CheckBoxRegKey=

ReportingFlags=

ReportingFlags=

Stage1URL=

Stage1URL=

Stage2URL=

Stage2URL=

%General_Reportee%

%General_Reportee%

%u %s

%u %s

%u.%u %s

%u.%u %s

%s %s %s %s in %s %s %s fDebug %s at offset %s

%s %s %s %s in %s %s %s fDebug %s at offset %s

Bucket: d

Bucket: d

BucketTable %d

BucketTable %d

%s, %s, %s, %s, %s, %s, %s, %s, %s, %s %s

%s, %s, %s, %s, %s, %s, %s, %s, %s, %s %s

\dw.log

\dw.log

policy.txt

policy.txt

crash.log

crash.log

status.txt

status.txt

hits.log

hits.log

count.txt

count.txt

%s\%s\%s

%s\%s\%s

%s\%s\%s\%s

%s\%s\%s\%s

eDWQueuedReporting

eDWQueuedReporting

DWPersistentQueuedReporting

DWPersistentQueuedReporting

"%s\%s" -%c

"%s\%s" -%c

dwtrig20.exe

dwtrig20.exe

ReportSize=

ReportSize=

\*.cab

\*.cab

dwq.snt

dwq.snt

"%s" -%c %u

"%s" -%c %u

SEventSystem.EventSubscription

SEventSystem.EventSubscription

SubscriptionID=%s

SubscriptionID=%s

#$%&%&'(

#$%&%&'(

Comctl32.dll

Comctl32.dll

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\166F97.dmp

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\166F97.dmp

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp

.NET Runtime 2.0 Error Reporting

.NET Runtime 2.0 Error Reporting

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\dw.log

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\dw.log

Microsoft Application Error Reporting

Microsoft Application Error Reporting

11.0.8160

11.0.8160

Windows

Windows

DW20.Exe

DW20.Exe

crys.exe_3640_rwx_00130000_0003B000:

.text

.text

`.data

`.data

.reloc

.reloc

%s, u %s %u u:u:u GMT

%s, u %s %u u:u:u GMT

HTTP/1.1

HTTP/1.1

HTTP/1.0

HTTP/1.0

hXXp://

hXXp://

; charset=%s

; charset=%s

HTTP/1.1 %u %s

HTTP/1.1 %u %s

Date: %s

Date: %s

Content-Length: %u

Content-Length: %u

Expires: %s

Expires: %s

Content-Type: %s%s

Content-Type: %s%s

ID: %s

ID: %s

value_%s

value_%s

value_%s_%s

value_%s_%s

%s = "%s";

%s = "%s";

update.exe

update.exe

config.bin

config.bin

PR_OpenTCPSocket

PR_OpenTCPSocket

cit_ffcookie.module

cit_ffcookie.module

cit_video.module

cit_video.module

%ds~U;MM

%ds~U;MM

userenv.dll

userenv.dll

del "%s"

del "%s"

if exist "%s" goto d

if exist "%s" goto d

del /F "%s"

del /F "%s"

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1)

urlmon.dll

urlmon.dll

cabinet.dll

cabinet.dll

hXXp://xxxxxxxx.com/xxxx/xxxx.php

hXXp://xxxxxxxx.com/xxxx/xxxx.php

%s%s%s

%s%s%s

gdiplus.dll

gdiplus.dll

GdiplusShutdown

GdiplusShutdown

ole32.dll

ole32.dll

gdi32.dll

gdi32.dll

6;:5;66"

6;:5;66"

,1;(,; = 1

,1;(,; = 1

'472%9,{

'472%9,{

F@ICTQ}cRTWAunO}mmts}NX~csgzn~)[jzyemer\]ika

F@ICTQ}cRTWAunO}mmts}NX~csgzn~)[jzyemer\]ika

8/3.xae4LOa

8/3.xae4LOa

6 !26!1'1!

6 !26!1'1!

hXXps://

hXXps://

HTTP/1.

HTTP/1.

facebook.com

facebook.com

Cookie: %s

Cookie: %s

Referer: %s

Referer: %s

Accept: %s

Accept: %s

Accept-Language: %s

Accept-Language: %s

Accept-Encoding: %s

Accept-Encoding: %s

_getFirefoxCookie

_getFirefoxCookie

hXXp://VVV.google.com/webhp

hXXp://VVV.google.com/webhp

SSShD

SSShD

SSShXe

SSShXe

SSShye

SSShye

GetProcessHeap

GetProcessHeap

CreatePipe

CreatePipe

KERNEL32.dll

KERNEL32.dll

MsgWaitForMultipleObjects

MsgWaitForMultipleObjects

OpenWindowStationW

OpenWindowStationW

GetProcessWindowStation

GetProcessWindowStation

CreateWindowStationW

CreateWindowStationW

CloseWindowStation

CloseWindowStation

SetProcessWindowStation

SetProcessWindowStation

SetKeyboardState

SetKeyboardState

ExitWindowsEx

ExitWindowsEx

GetKeyboardState

GetKeyboardState

MapVirtualKeyW

MapVirtualKeyW

GetKeyboardLayoutList

GetKeyboardLayoutList

USER32.dll

USER32.dll

RegCreateKeyExW

RegCreateKeyExW

RegOpenKeyExW

RegOpenKeyExW

RegCloseKey

RegCloseKey

RegCreateKeyW

RegCreateKeyW

RegEnumKeyW

RegEnumKeyW

RegQueryInfoKeyW

RegQueryInfoKeyW

RegEnumKeyExW

RegEnumKeyExW

ADVAPI32.dll

ADVAPI32.dll

UrlUnescapeA

UrlUnescapeA

SHDeleteKeyW

SHDeleteKeyW

PathIsURLW

PathIsURLW

SHLWAPI.dll

SHLWAPI.dll

ShellExecuteW

ShellExecuteW

SHELL32.dll

SHELL32.dll

Secur32.dll

Secur32.dll

SetViewportOrgEx

SetViewportOrgEx

GDI32.dll

GDI32.dll

WS2_32.dll

WS2_32.dll

PFXImportCertStore

PFXImportCertStore

CertDeleteCertificateFromStore

CertDeleteCertificateFromStore

CertOpenSystemStoreW

CertOpenSystemStoreW

CertCloseStore

CertCloseStore

CertEnumCertificatesInStore

CertEnumCertificatesInStore

CertDuplicateCertificateContext

CertDuplicateCertificateContext

PFXExportCertStoreEx

PFXExportCertStoreEx

CRYPT32.dll

CRYPT32.dll

HttpSendRequestExA

HttpSendRequestExA

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestExW

HttpSendRequestExW

HttpSendRequestW

HttpSendRequestW

HttpOpenRequestA

HttpOpenRequestA

HttpOpenRequestW

HttpOpenRequestW

HttpEndRequestA

HttpEndRequestA

HttpSendRequestA

HttpSendRequestA

HttpEndRequestW

HttpEndRequestW

InternetCrackUrlA

InternetCrackUrlA

HttpAddRequestHeadersW

HttpAddRequestHeadersW

GetUrlCacheEntryInfoW

GetUrlCacheEntryInfoW

HttpAddRequestHeadersA

HttpAddRequestHeadersA

WININET.dll

WININET.dll

OLEAUT32.dll

OLEAUT32.dll

NETAPI32.dll

NETAPI32.dll

VERSION.dll

VERSION.dll

WINMM.dll

WINMM.dll

PSSSSSSh

PSSSSSSh

3$3*30383

3$3*30383

6|7k7u7

6|7k7u7

9 :1:::@:

9 :1:::@:

42>204:4

42>204:4

sXXXX

sXXXX

nspr4.dll

nspr4.dll

chrome.dll

chrome.dll

\StringFileInfo\xx\%s

\StringFileInfo\xx\%s

ntdll.dll

ntdll.dll

kernel32.dll

kernel32.dll

"%s" %s

"%s" %s

/c "%s"

/c "%s"

%sx.%s

%sx.%s

%sx

%sx

SELECT * FROM %s

SELECT * FROM %s

Company: %s

Company: %s

Product: %s

Product: %s

Version: %s

Version: %s

Software\Microsoft\Windows\CurrentVersion\Uninstall

Software\Microsoft\Windows\CurrentVersion\Uninstall

%u: %s | %s | %s

%u: %s | %s | %s

Global\XXX

Global\XXX

SysShadow

SysShadow

Chrome

Chrome

Firefox

Firefox

%Documents and Settings%\%current user%\Application Data

%Documents and Settings%\%current user%\Application Data

{E90C4A0B-BD46-7BBE-341D-3959D67D1D48}

{E90C4A0B-BD46-7BBE-341D-3959D67D1D48}

%Documents and Settings%\%current user%\Application Data\Tyawy\foed.qid

%Documents and Settings%\%current user%\Application Data\Tyawy\foed.qid

%Documents and Settings%\%current user%\Application Data\Tyawy

%Documents and Settings%\%current user%\Application Data\Tyawy

foed.qid

foed.qid

Global\{7F77F82E-0F63-EDC5-341D-3959D67D1D48}

Global\{7F77F82E-0F63-EDC5-341D-3959D67D1D48}

svchost.exe_2084:

.text

.text

`.data

`.data

.rsrc

.rsrc

MSVBVM60.DLL

MSVBVM60.DLL

DW_EXEC

DW_EXEC

S_EXEC

S_EXEC

FTPUPLOAD

FTPUPLOAD

P_FTP

P_FTP

P_UDP

P_UDP

P_HTTP

P_HTTP

P_KEYLOGGER

P_KEYLOGGER

%Program Files%\Microsoft Visual Studio\VB98\VB6.OLB

%Program Files%\Microsoft Visual Studio\VB98\VB6.OLB

wininet.dll

wininet.dll

DeleteUrlCacheEntryA

DeleteUrlCacheEntryA

FindExecutableA

FindExecutableA

ShellExecuteA

ShellExecuteA

VBA6.DLL

VBA6.DLL

InternetOpenUrlA

InternetOpenUrlA

update.exe

update.exe

\POS.exe

\POS.exe

\dwm.exe

\dwm.exe

\KY.html

\KY.html

.html

.html

post.php

post.php

\output.txt

\output.txt

wscript.shell

wscript.shell

WordPad.exe

WordPad.exe

HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\

HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\

HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\currentversion\winlogon\Userinit

HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\currentversion\winlogon\Userinit

\system32\Userinit.exe

\system32\Userinit.exe

HKEY_LOCAL_MACHINE64\software\microsoft\windows\currentversion\winlogon\Userinit

HKEY_LOCAL_MACHINE64\software\microsoft\windows\currentversion\winlogon\Userinit

\uninstall.vbs

\uninstall.vbs

reg add hkcu\software\microsoft\windows\currentversion\policies\system /v disableregistrytools /t reg_dword /d "0" /f

reg add hkcu\software\microsoft\windows\currentversion\policies\system /v disableregistrytools /t reg_dword /d "0" /f

reg add hkcu\software\microsoft\windows\currentversion\policies\system /v disabletaskmgr /t reg_dword /d "0" /f

reg add hkcu\software\microsoft\windows\currentversion\policies\system /v disabletaskmgr /t reg_dword /d "0" /f

WScript.Sleep(3000)

WScript.Sleep(3000)

Scripting.FileSystemObject

Scripting.FileSystemObject

PV4.deletefile

PV4.deletefile

PV4.DeleteFile WScript.ScriptFullName

PV4.DeleteFile WScript.ScriptFullName

cmd.exe /c

cmd.exe /c

\update.vbs

\update.vbs

WScript.Sleep(2000)

WScript.Sleep(2000)

Set ObjShell = WScript.CreateObject(

Set ObjShell = WScript.CreateObject(

WScript.Shell

WScript.Shell

Set ObjVarE = ObjShell.Environment(

Set ObjVarE = ObjShell.Environment(

PV4.CopyFile

PV4.CopyFile

\update.exe

\update.exe

VARIABLE.Run

VARIABLE.Run

Microsoft.XMLHTTP

Microsoft.XMLHTTP

Adodb.Stream

Adodb.Stream

Windows

Windows

gate.php

gate.php

MSXML2.ServerXMLHTTP

MSXML2.ServerXMLHTTP

application/x-www-form-urlencoded

application/x-www-form-urlencoded

HKEY_LOCAL_MACHINE\Software\Microsoft\Security Center\UACDisableNotify

HKEY_LOCAL_MACHINE\Software\Microsoft\Security Center\UACDisableNotify

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA

HKEY_LOCAL_MACHINE64\Software\Microsoft\Security Center\UACDisableNotify

HKEY_LOCAL_MACHINE64\Software\Microsoft\Security Center\UACDisableNotify

HKEY_LOCAL_MACHINE64\Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA

HKEY_LOCAL_MACHINE64\Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA

\Melt.bat

\Melt.bat

winmgmts:{impersonationlevel=impersonate}!\\.\root\cimv2

winmgmts:{impersonationlevel=impersonate}!\\.\root\cimv2

select * from win32_operatingsystem

select * from win32_operatingsystem

adoKit.dll

adoKit.dll

vboxmrxnp.dll

vboxmrxnp.dll

vmGuestLib.dll

vmGuestLib.dll

reg add hkcu\software\microsoft\windows\currentversion\policies\system /v disableregistrytools /t reg_dword /d "1" /f

reg add hkcu\software\microsoft\windows\currentversion\policies\system /v disableregistrytools /t reg_dword /d "1" /f

reg add hkcu\software\microsoft\windows\currentversion\policies\system /v disabletaskmgr /t reg_dword /d "1" /f

reg add hkcu\software\microsoft\windows\currentversion\policies\system /v disabletaskmgr /t reg_dword /d "1" /f

SbieDll.dll

SbieDll.dll

\Dropbox\host.db

\Dropbox\host.db

shell32.dll, 2

shell32.dll, 2

shell32.dll, 3

shell32.dll, 3

.fldr

.fldr

shell32.dll, 0

shell32.dll, 0

\explorer.exe

\explorer.exe

\deact.config

\deact.config

\pos.config

\pos.config

\ky.config

\ky.config

70144646

70144646

Shell.Application

Shell.Application

ShellExecute

ShellExecute

consent.exe

consent.exe

bin.base64

bin.base64

\grabbed.log

\grabbed.log

plugins/passwords.p

plugins/passwords.p

\Flog.log

\Flog.log

plugins/PTF.p

plugins/PTF.p

\Elog.log

\Elog.log

\UDP.ini

\UDP.ini

\HTTP.ini

\HTTP.ini

\capture.jpg

\capture.jpg

.wallet

.wallet

inc/email.php

inc/email.php

\email.txt

\email.txt

plugins/keylogger.p

plugins/keylogger.p

Internet Explorer\iexplore.exe

Internet Explorer\iexplore.exe

WinHttp.WinHttpRequest.5.1

WinHttp.WinHttpRequest.5.1

Mozilla/4.0 (compatible; MyApp 1.0; Windows NT 5.1)

Mozilla/4.0 (compatible; MyApp 1.0; Windows NT 5.1)

inc/read.php

inc/read.php

4.02.0301

4.02.0301

dwm.exe_440:

.text

.text

`.data

`.data

.rsrc

.rsrc

MSVBVM60.DLL

MSVBVM60.DLL

%Program Files%\Microsoft Visual Studio\VB98\VB6.OLB

%Program Files%\Microsoft Visual Studio\VB98\VB6.OLB

VBA6.DLL

VBA6.DLL

user32.dll

user32.dll

SetWindowsHookExA

SetWindowsHookExA

UnhookWindowsHookEx

UnhookWindowsHookEx

kernel32.dll

kernel32.dll

GetAsyncKeyState

GetAsyncKeyState

@*\AC:\Users\Edbitss\Documents\gorynych\source\Plugins\keylogger\Local_Security_Authority_Process.vbp

@*\AC:\Users\Edbitss\Documents\gorynych\source\Plugins\keylogger\Local_Security_Authority_Process.vbp

\KY.html

\KY.html

Key-Spy Report -

Key-Spy Report -

>[KEYLOGGER REPORT]

>[KEYLOGGER REPORT]

4.07.0046

4.07.0046

Hook.exe

Hook.exe

crys.exe_3640_rwx_675A6000_00003000:

.Qg

.Qg

*Rg`.Rg|)RgL Rg

*Rg`.Rg|)RgL Rg

scvhost.exe_3704_rwx_00B20000_0003B000:

.text

.text

`.data

`.data

.reloc

.reloc

%s, u %s %u u:u:u GMT

%s, u %s %u u:u:u GMT

HTTP/1.1

HTTP/1.1

HTTP/1.0

HTTP/1.0

hXXp://

hXXp://

; charset=%s

; charset=%s

HTTP/1.1 %u %s

HTTP/1.1 %u %s

Date: %s

Date: %s

Content-Length: %u

Content-Length: %u

Expires: %s

Expires: %s

Content-Type: %s%s

Content-Type: %s%s

ID: %s

ID: %s

value_%s

value_%s

value_%s_%s

value_%s_%s

%s = "%s";

%s = "%s";

update.exe

update.exe

config.bin

config.bin

PR_OpenTCPSocket

PR_OpenTCPSocket

cit_ffcookie.module

cit_ffcookie.module

cit_video.module

cit_video.module

%ds~U;MM

%ds~U;MM

userenv.dll

userenv.dll

del "%s"

del "%s"

if exist "%s" goto d

if exist "%s" goto d

del /F "%s"

del /F "%s"

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1)

urlmon.dll

urlmon.dll

cabinet.dll

cabinet.dll

hXXp://xxxxxxxx.com/xxxx/xxxx.php

hXXp://xxxxxxxx.com/xxxx/xxxx.php

%s%s%s

%s%s%s

gdiplus.dll

gdiplus.dll

GdiplusShutdown

GdiplusShutdown

ole32.dll

ole32.dll

gdi32.dll

gdi32.dll

6;:5;66"

6;:5;66"

,1;(,; = 1

,1;(,; = 1

'472%9,{

'472%9,{

F@ICTQ}cRTWAunO}mmts}NX~csgzn~)[jzyemer\]ika

F@ICTQ}cRTWAunO}mmts}NX~csgzn~)[jzyemer\]ika

8/3.xae4LOa

8/3.xae4LOa

6 !26!1'1!

6 !26!1'1!

hXXps://

hXXps://

HTTP/1.

HTTP/1.

facebook.com

facebook.com

Cookie: %s

Cookie: %s

Referer: %s

Referer: %s

Accept: %s

Accept: %s

Accept-Language: %s

Accept-Language: %s

Accept-Encoding: %s

Accept-Encoding: %s

_getFirefoxCookie

_getFirefoxCookie

hXXp://VVV.google.com/webhp

hXXp://VVV.google.com/webhp

SSShD

SSShD

SSShXe

SSShXe

SSShye

SSShye

GetProcessHeap

GetProcessHeap

CreatePipe

CreatePipe

KERNEL32.dll

KERNEL32.dll

MsgWaitForMultipleObjects

MsgWaitForMultipleObjects

OpenWindowStationW

OpenWindowStationW

GetProcessWindowStation

GetProcessWindowStation

CreateWindowStationW

CreateWindowStationW

CloseWindowStation

CloseWindowStation

SetProcessWindowStation

SetProcessWindowStation

SetKeyboardState

SetKeyboardState

ExitWindowsEx

ExitWindowsEx

GetKeyboardState

GetKeyboardState

MapVirtualKeyW

MapVirtualKeyW

GetKeyboardLayoutList

GetKeyboardLayoutList

USER32.dll

USER32.dll

RegCreateKeyExW

RegCreateKeyExW

RegOpenKeyExW

RegOpenKeyExW

RegCloseKey

RegCloseKey

RegCreateKeyW

RegCreateKeyW

RegEnumKeyW

RegEnumKeyW

RegQueryInfoKeyW

RegQueryInfoKeyW

RegEnumKeyExW

RegEnumKeyExW

ADVAPI32.dll

ADVAPI32.dll

UrlUnescapeA

UrlUnescapeA

SHDeleteKeyW

SHDeleteKeyW

PathIsURLW

PathIsURLW

SHLWAPI.dll

SHLWAPI.dll

ShellExecuteW

ShellExecuteW

SHELL32.dll

SHELL32.dll

Secur32.dll

Secur32.dll

SetViewportOrgEx

SetViewportOrgEx

GDI32.dll

GDI32.dll

WS2_32.dll

WS2_32.dll

PFXImportCertStore

PFXImportCertStore

CertDeleteCertificateFromStore

CertDeleteCertificateFromStore

CertOpenSystemStoreW

CertOpenSystemStoreW

CertCloseStore

CertCloseStore

CertEnumCertificatesInStore

CertEnumCertificatesInStore

CertDuplicateCertificateContext

CertDuplicateCertificateContext

PFXExportCertStoreEx

PFXExportCertStoreEx

CRYPT32.dll

CRYPT32.dll

HttpSendRequestExA

HttpSendRequestExA

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestExW

HttpSendRequestExW

HttpSendRequestW

HttpSendRequestW

HttpOpenRequestA

HttpOpenRequestA

HttpOpenRequestW

HttpOpenRequestW

HttpEndRequestA

HttpEndRequestA

HttpSendRequestA

HttpSendRequestA

HttpEndRequestW

HttpEndRequestW

InternetCrackUrlA

InternetCrackUrlA

HttpAddRequestHeadersW

HttpAddRequestHeadersW

GetUrlCacheEntryInfoW

GetUrlCacheEntryInfoW

HttpAddRequestHeadersA

HttpAddRequestHeadersA

WININET.dll

WININET.dll

OLEAUT32.dll

OLEAUT32.dll

NETAPI32.dll

NETAPI32.dll

VERSION.dll

VERSION.dll

WINMM.dll

WINMM.dll

PSSSSSSh

PSSSSSSh

3$3*30383

3$3*30383

6|7k7u7

6|7k7u7

9 :1:::@:

9 :1:::@:

42>204:4

42>204:4

sXXXX

sXXXX

nspr4.dll

nspr4.dll

chrome.dll

chrome.dll

\StringFileInfo\xx\%s

\StringFileInfo\xx\%s

ntdll.dll

ntdll.dll

kernel32.dll

kernel32.dll

"%s" %s

"%s" %s

/c "%s"

/c "%s"

%sx.%s

%sx.%s

%sx

%sx

SELECT * FROM %s

SELECT * FROM %s

Company: %s

Company: %s