Edit C:\Windows\SysWOW64\rpcnsh.dll
MZ? ?? ? @ ? ? ? ?!?L?!This program cannot be run in DOS mode. $ {`;?uh?uh?uh??>uh??1uh?uhmuh??,uh??>uh??:uh??>uh??>uhRich?uh PE L 3?R ? ! J . ? ` ? ? @ ? K ,? ? ? ? @ ?' \ ? , .text ? J `.data 0 ` N @ ?.idata ? R @ @.rsrc ? \ @ @.reloc ? ? b @ B X ? 3?R # ?' ? ? c a d d d e l e t e r e s e t s h o w f i l t e r c o n d i t i o n r u l e t e s t rpcnsh.dll r p c ?)~?1?&D?????(Yo_G??;a)u D e f a u l t A d d L i s t D e l e t e L i s t % 1 ! S ! U n k n o w n s e l e c t i v e b i n d i n g f o r m a t S u b n e t I n t e r f a c e S t a t u s D e s c r i p t i o n % 1 ! - 1 6 S ! E n a b l e d % 1 ! - 9 s ! D i s a b l e d % 1 ! S ! % 1 ! S ! %S s e t t i n g s i n t e r f a c e s u m e p m a p e p _ a d d p r o x y _ c o n n p r o x y _ i f r e m o t e _ u s e r _ t o k e n i f _ u u i d i f _ v e r s i o n i f _ f l a g d c o m _ a p p _ i d i m a g e _ n a m e p r o t o c o l a u t h _ t y p e a u t h _ l e v e l s e c _ e n c r y p t _ a l g s e c _ k e y _ s i z e l o c a l _ a d d r _ v 4 l o c a l _ a d d r _ v 6 l o c a l _ p o r t p i p e r e m o t e _ a d d r _ v 4 r e m o t e _ a d d r _ v 6 p r o c e s s _ w i t h _ i f _ u u i d e p _ v a l u e e p _ f l a g s c l i e n t _ t o k e n s e r v e r _ n a m e s e r v e r _ p o r t p r o x y _ a u t h _ t y p e c l i e n t _ c e r t _ k e y _ l e n g t h c l i e n t _ c e r t _ o i d b l o c k p e r m i t c o n t i n u e e q u a l g r e a t e r l e s s g r e a t e r _ o r _ e q u a l l e s s _ o r _ e q u a l r a n g e a l l _ s e t a n y _ s e t n o n e _ s e t F W P _ M A T C H _ E Q U A L F W P _ M A T C H _ G R E A T E R F W P _ M A T C H _ L E S S F W P _ M A T C H _ G R E A T E R _ O R _ E Q U A L F W P _ M A T C H _ L E S S _ O R _ E Q U A L F W P _ M A T C H _ R A N G E F W P _ M A T C H _ F L A G S _ A L L _ S E T F W P _ M A T C H _ F L A G S _ A N Y _ S E T F W P _ M A T C H _ F L A G S _ N O N E _ S E T F W P _ E M P T Y F W P _ U I N T 8 F W P _ U I N T 1 6 F W P _ U I N T 3 2 F W P _ U I N T 6 4 F W P _ I N T 8 F W P _ I N T 1 6 F W P _ I N T 3 2 F W P _ I N T 6 4 F W P _ F L O A T F W P _ D O U B L E F W P _ B Y T E _ A R R A Y 1 6 _ T Y P E F W P _ B Y T E _ B L O B _ T Y P E F W P _ S E C U R I T Y _ D E S C R I P T O R _ T Y P E F W P _ T O K E N _ A C C E S S _ I N F O R M A T I O N _ T Y P E % 0 8 l x - % 0 4 h x - % 0 4 h x - % 0 2 h x % 0 2 h x - % 0 2 h x % 0 2 h x % 0 2 h x % 0 2 h x % 0 2 h x % 0 2 h x W S A S t a r t u p % s % 0 2 h x C o n v e r t S t r i n g S e c u r i t y D e s c r i p t o r T o S e c u r i t y D e s c r i p t o r % 1 ! 0 8 l x ! - % 2 ! 0 4 x ! - % 3 ! 0 4 x ! - % 4 ! 0 2 x ! % 5 ! 0 2 x ! - % 6 ! 0 2 x ! % 7 ! 0 2 x ! % 8 ! 0 2 x ! % 9 ! 0 2 x ! % 1 0 ! 0 2 x ! % 1 1 ! 0 2 x ! % 1 ! 0 8 l x ! % 2 ! 0 8 l x ! % 3 ! 0 8 l x ! % 4 ! 0 8 l x ! % 1 ! l s ! % 1 ! S ! % 1 ! 0 2 x ! C o n v e r t S e c u r i t y D e s c r i p t o r T o S t r i n g S e c u r i t y D e s c r i p t o r % 1 ! s ! 0 x % x % h d RpcpFwpmEngineOpenLocal R P C F i l t e r R P C F i l t e r RpcpFwpmFilterAdd RpcpFwpmEngineCloseLocal T y p e : V a l u e : E m p t y 0 x % 1 ! x ! % 1 ! d ! - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - f i l t e r K e y : d i s p l a y D a t a . n a m e : % 1 ! s ! d i s p l a y D a t a . d e s c r i p t i o n : % 1 ! s ! f i l t e r I d : 0 x % 1 ! x ! l a y e r K e y : w e i g h t : a c t i o n . t y p e : A u d i t : E n a b l e n u m F i l t e r C o n d i t i o n s : % 1 ! d ! f i l t e r C o n d i t i o n [ % 1 ! d ! ] f i e l d K e y : m a t c h T y p e : c o n d i t i o n V a l u e : FwGetAllRpcFiltersEnumNextFilter FwGetAllRpcFiltersEnumBegin RpcpFwpmFilterDeleteByKey UuidCreateNil failed: 0x%x F i l t e r K e y : f i l t e r k e y a l l f i e l d m a t c h t y p e d a t a n c a c n _ i p _ t c p 1 n c a c n _ n p 2 n c a c n _ h t t p 4 l a y e r a c t i o n t y p e p e r s i s t e n c e a u d i t v o l a t i l e e n a b l e U u i d C r e a t e S e q u e n t i a l There is a pending rule. Delete or commit it before adding a new one Not enough paramters ParseRule failed: 0x%x Conditon tuple is missing one or more fields ParseConditionAdd failed 0x%x Filter Added NewRpcfilter failed 0x%x h ? ? ? ? ? ? 4 T p ? ? ? ? ? 8 L ` | ? ? ? ? ?&