Edit C:\Windows\System32\drivers\FWPKCLNT.SYS
MZ? ?? ? @ ? ? ? ?!?L?!This program cannot be run in DOS mode. $ ????3??3??3??3?3G_3??3G[3??3GZ3??3GY3??3G^3??3GC3??3G]3??3GX3??3Rich??3 PE d? ?R ? " ? ? ? ? a> ` ?' @P d p / ? ?- j `! ? \ Hr 8 ) ? ? ? .text ? d h.rdata |? ? ? h @ H.data ? ? ` @ ?.pdata ?- ? . d @ HPAGE ? ? T ? `.edata ?' ( ? @ @INIT ? P ?.rsrc / p 0 @ B.reloc \ ? P @ B ????????H?$H?$UVWATAUAVAWH?$??? E?H?L?3?? H?H?? H?? H;t{9s(vv3??p?A?~? ?_ ?(?+ A? A?? A?3???^ I?????H?$(I???A?H?$ A?V??t_?x4E?? ?x'I??Rr H?tH? >p H;t H?H??(_ ?H?$? H?? A_A^A]A\_^]??? ????I???A??H??? H?H?t^H? ? H;tRH????H??] ??H?? H?????] ?x tH?(? H?t?Uo ?O(I??Aq H?o????E3??????^ ??????AVH?@E?H?H?H??c E??c H?$hH?$pL?$xE2?3?1q H?H?tnH? o H;tbH??H??b ??H?? H?????b @8jt3H?$? H?tH?H?E?u#?H?$pH?$hL?$xH?@A^^[??% ???(@?H?t?Wn ?O(H??Cp ???????????XD?L?H?ttH?$? H?tgH?$? H?tZH?$? H?tM?$? ?_ H?$P3?\$HH?$@H?$8H?$0H?$(L?$ M?I?3???6 H?$PH?X???) A? "??X?M ???????????H?$H?$H?$WATAUAVAWH?pD?E3??M?E?H?L?$P?? 2??H?? H??_ H;8? H??'o ??` H??^o H???^ H??` H?$? H??H??^ ??H?? H?????^ D8k?^ H?$? H?$? fD?H?0H?$? L?H?D?@H?8H?t?????? ??$H?$? H?t>H?(?;l ??G(?n 3??$pI?0I?8I?@I?A_A^A]A\_????L?(???A???v@?t{??C?? ??? I?H?$0H?? H?`H?H?$(? 3?H?3k H?`8?@? fA?Nu^I??u^H?$0I?DH?H?$(? 3??A???? u:I?H?8H?(H?$0H?H?H?$(? 3?I? ?x, t??D ??N t6??%? uI? H? ?H?H?$(?3?? ?I? H? ?` I?H?8?>` ?H?%)m ??????????(?&m H? k 3??tH;t H?H?(?? H;?D??????????H?H?H?H? AVH? I?D?H?3?? L?H?tRH?? L; tFM?? M??a H?????L?H??a !7H?$0H?$8H?$HH?H?$@H? A^?3???????? ?3???'a ??$??@??<???` ???` ???` ???u ?s%H?H? [?? "?? ?t??' "?? A?( "?x` ?????H?H?H?H?WH?PI??H?H??_ M??_ A H??P?@?=???H?H?uC??_ ???_ ???_ ???_ ???_ ???_ ???_ ?? H?$`H?$p?H?$hH?P_??????H?$H?$H?$ AVH? 3??H?H?H??^ H??? H?? H?uUH? H;?[H?H;??] H?$0? H??] H?H?? ^ ?u13??$0H?$8H?$@H?$HH? A^?? H;????H??? ??H?%? ?????H? 3?kj ?x?H? [??? D??,H H?????Qh H?? ?3??uH?b! A?5 "?? ? ???????NULL ??????wpiCalloutRegisterWithoutDeviceFast0 ?????IPsecSaContextAddInbound0 ???IPsecSaContextAddInbound1 ???IPsecSaContextAddOutbound0 ???PsecSaContextAddOutbound1 ???wpmNetEventCreateEnumHandle0 ?FwppProxyNetEventCreateEnumHandle ???????FwpmNetEventEnum2 ???????FwppProxyNetEventEnum ?????FwpmNetEventDestroyEnumHandle0 ?wppProxynameDestroyEnumHandle ?wpmConnectionGetById0 ?????wppProxyConnectionGetById ???wpmConnectionGetSecurityInfo0 ?wppProxyConnectionGetSecurityInfo ???????wpmConnectionSetSecurityInfo0 ?wppProxyConnectionSetSecurityInfo ???????pcAsyncCompleteCall ??????wppProxySecureSocketAdd ????wppProxySecureSocketDelete ??FwppVpnTriggerEventFire0 ????wppProxyVpnTriggerEventFire ??PsecDriverInitiateAcquire ???wppProxyBfeIPsecDriverInitiateAcquire ?????PsecDriverExpire ???????FwppProxyBfeIPsecDriverExpire ?IPsecDriverProcessClearTextResponse ??????FwppProxyBfeIPsecDriverProcessClearTextResponse IkeextGetStatistics0 ??????keextGetStatistics1 ??????wppProxyIkeGetStatistics ???IkeextSaDeleteById0 ??????FwppProxyIkeSADeleteById ????keextSaGetById2 ????????wppProxyIkeSAGetById ?????IkeextSaCreateEnumHandle0 ???FwppProxyIkeSACreateEnumHandle ?keextSaEnum2 ?FwppProxyIkeSAEnum ???????keextSaEnum0 ?IkeextSaEnum1 ?IkeextSaDestroyEnumHandle0 ???wppProxyIkeSADestroyEnumHandle IkeextSaDbGetSecurityInfo0 ???wppProxyIkeSaDbGetSecurityInfo IkeextSaDbSetSecurityInfo0 ???wppProxyIkeSaDbSetSecurityInfo WfpMidlObjectHandler ??????wppBfeStateHandler ??????FwppCalloutHandler ???????wppCommonHandler ???????FwppTcpIpHandler ????????wppL2Handler ?FwppInit ????tlGetOwnerSecurityDescriptor ?RtlGetGroupSecurityDescriptor ?RtlGetDaclSecurityDescriptor ??tlGetSaclSecurityDescriptor ??wppSecurityDescriptorGetInfo ?RtlCreateSecurityDescriptor ??RtlSetOwnerSecurityDescriptor ?RtlSetGroupSecurityDescriptor ?RtlSetDaclSecurityDescriptor ??tlSetSaclSecurityDescriptor ??wppSecurityDescriptorSetInfo ?FwppSessionGetIkeRpcStatus ???eWaitForSingleObject ?????FwppSessionGetIkeBinding ????wppDeepCopyToVerIndependent_IKEEXT_POLICY1 ??FwppDeepCopyToVerIndependent_IKEEXT_EM_POLICY1 ?wppDeepCopyToVerIndependent_IPSEC_TRANSPORT_POLICY1 ??????wppDeepCopyToVerIndependent_IPSEC_TUNNEL_ENDPOINTS1 ??????wppDeepCopyToVerIndependent_IPSEC_TUNNEL_POLICY1 ???????FwppDeepCopyToVerIndependent_IPSEC_DOSP_OPTIONS0 ????????wppDeepCopyToVerIndependent_FWPM_PROVIDER_CONTEXT1 ??????FwppDeepCopyFromVerIndependent_FWP_V6_ADDR_AND_MASK ??????FwppDeepCopyFromVerIndependent_IKEEXT_PRESHARED_KEY_AUTHENTICATION1 ??????FwppDeepCopyFromVerIndependent_IKEEXT_AUTHENTICATION_METHOD1 ??wppDeepCopyFromVerIndependent_IKEEXT_POLICY1 ?FwppDeepCopyFromVerIndependent_IKEEXT_EM_POLICY1 ????????wppDeepCopyFromVerIndependent_IKEEXT_CERTIFICATE_CREDENTIAL1 ?FwppDeepCopyFromVerIndependent_IKEEXT_CREDENTIAL1 ???????FwppDeepCopyFromVerIndependent_IKEEXT_CREDENTIAL_PAIR1 ?????wppDeepCopyFromVerIndependent_IKEEXT_CREDENTIALS1 ???????wppDeepCopyFromVerIndependent_IKEEXT_SA_DETAILS1 ???????FwppDeepCopyFromVerIndependent_IPSEC_SA_TRANSFORM0 ???????wppDeepCopyFromVerIndependent_IPSEC_TRANSPORT_POLICY1 ?????wppDeepCopyFromVerIndependent_IPSEC_TUNNEL_ENDPOINTS1 ?????wppDeepCopyFromVerIndependent_IPSEC_TUNNEL_POLICY1 ??????FwppDeepCopyFromVerIndependent_IPSEC_AGGREGATE_SA_STATISTICS0 ?FwppDeepCopyFromVerIndependent_IPSEC_ESP_DROP_PACKET_STATISTICS0 ????????wppDeepCopyFromVerIndependent_IPSEC_AH_DROP_PACKET_STATISTICS0 FwppDeepCopyFromVerIndependent_IPSEC_AGGREGATE_DROP_PACKET_STATISTICS0 ?????wppDeepCopyFromVerIndependent_IPSEC_TRAFFIC_STATISTICS0 ????wppDeepCopyFromVerIndependent_IPSEC_STATISTICS0 ????????wppDeepCopyFromVerIndependent_IPSEC_DOSP_OPTIONS0 ???????wppDeepCopyFromVerIndependent_FWPM_PROVIDER_CONTEXT1 ?????FwppAllocAndDeepCopyFromVerIndependent_IKEEXT_PRESHARED_KEY_AUTHENTICATION1 ??FwppAllocAndDeepCopyFromVerIndependent_IKEEXT_POLICY1 ?????FwppAllocAndDeepCopyFromVerIndependent_IKEEXT_EM_POLICY0 ????wppAllocAndDeepCopyFromVerIndependent_IKEEXT_EM_POLICY1 ????wppAllocAndDeepCopyFromVerIndependent_IKEEXT_CERTIFICATE_CREDENTIAL1 ?????FwppAllocAndDeepCopyFromVerIndependent_IKEEXT_SA_DETAILS1 ???FwppAllocAndDeepCopyFromVerIndependent_IPSEC_TRANSPORT_POLICY1 ?wppAllocAndDeepCopyFromVerIndependent_IPSEC_TUNNEL_POLICY1 ??FwppAllocAndDeepCopyFromVerIndependent_IPSEC_DOSP_OPTIONS0 ???wppAllocAndDeepCopyFromVerIndependent_FWPM_PROVIDER_CONTEXT1 ?FwppArrayAllocAndDeepCopyFromVerIndependent_IKEEXT_AUTHENTICATION_METHOD1 ???FwppArrayAllocAndDeepCopyFromVerIndependent_IKEEXT_CREDENTIAL_PAIR0 ??????FwppArrayAllocAndDeepCopyFromVerIndependent_IKEEXT_CREDENTIAL_PAIR1 ??????FwppArrayOfPtrsAllocAndDeepCopyFromVerIndependent_IKEEXT_SA_DETAILS1 ??????wppArrayOfPtrsAllocAndDeepCopyFromVerIndependent_FWPM_PROVIDER_CONTEXT1 ????wppArrayAllocAndDeepCopyToVerIndependent_UINT64 ????????wppArrayAllocAndDeepCopyFromVerIndependent_UINT64 ???????wppDeepCopyToVerIndependent_FWP_BYTE_BLOB ???wppAllocAndDeepCopyToVerIndependent_FWP_BYTE_BLOB ???????wppAllocAndDeepCopyToVerIndependent_SID ????tlCopySid ???wppAllocAndDeepCopyToVerIndependent_WSTR ???1.3.6.1.5.5.7.3.2 ???????1.3.6.1.5.5.8.2.2 ???????1.3.6.1.5.5.7.3.1 ???????FwppCopyCriteriaToRootConfig ??wppAllocAndCopyCriteriaToRootConfig ??????wppCopyCriteriaToRootConfigArray ???????FwppCollapseOutCriteriaToRootConfig0 ??????wppCreateRootConfigFromCriteria ????????wppConvertOutCriteriaToRootConfig ???????wppConvertInCriteriaToRootConfig ???????FwppConvertCertAuthFromVerIndependent ?????FwppConvertEmPolicyCertAuthFromVerIndependent ?FwppConvertIkeeExtPolicyCertAuthFromVerIndependent ???????wppConvertEmPolicyCertAuthToVerIndependent ??FwppConvertIkeeExtPolicyCertAuthToVerIndependent ????????wppConvertCertAuthToVerIndependent ??????FwppAddEkuCriteria ???????wppExpandIkeOutboundRootConfigToCriteria ???FwppExpandIkeV2OutboundRootConfigToCriteria ??FwppExpandAuthIpOutboundRootConfigToCriteria ??wppExpandCertAuthRootConfig0ArrayInToVerIndendent ???????wppExpandCertAuthRootConfig0ArrayOutToVerIndendent ??????FwppConvertTunnelPolicyCertAuthToVerIndependent FwppConvertTransportPolicyCertAuthToVerIndependent ???????wppConvertProvCtxtCertAuthToVerIndependent ??FwppConvertTunnelPolicyCertAuthFromVerIndependent ???????FwppConvertTransportPolicyCertAuthFromVerIndependent ??????wppConvertProvCtxtCertAuthFromVerIndependent ?FwppConvertProvCtxtArrayCertAuthFromVerIndependent ???????wppAllocAndDeepCopyToVerIndependent_IKEEXT_POLICY1 ??????FwppAllocAndDeepCopyToVerIndependent_IKEEXT_EM_POLICY1 ?????wppAllocAndDeepCopyToVerIndependent_IPSEC_TRANSPORT_POLICY1 ??wppAllocAndDeepCopyToVerIndependent_IPSEC_TUNNEL_POLICY1 ???FwppAllocAndDeepCopyToVerIndependent_IPSEC_DOSP_OPTIONS0 ????wppAllocAndDeepCopyToVerIndependent_FWPM_PROVIDER_CONTEXT1 ??FwppArrayAllocAndDeepCopyToVerIndependent_IKEEXT_AUTHENTICATION_METHOD1 ????FwppDeepCopyToVerIndependent_IKEEXT_PRESHARED_KEY_AUTHENTICATION1 ???????FwppDeepCopyToVerIndependent_IKEEXT_AUTHENTICATION_METHOD1 ???feFwpmClassifyOptionValidate ?BfeFwpmNetEventHeaderValidate ?BfeIkeExtCertificateAuthentication0Validate ??BfeIkeExtCertificateAuthentication1Validate ??BfeIkeExtCertRootConfigValidate BfeIkeExtCertRootConfigSslValidate ???????feArrayValidate ????????LongLongMult ?WfpRemoveContextFromFlow ????fpRemoveContextFromFlowFast ??wpsGetPacketListSecurityInformation0 ?????FwpsIPSecGetPacketListSecurityInformation ???FwppCommonInit ?etioAllocateAndInitializeStackBlock ??????wppTcpIpInit ?FwppL2Init ???wpsPendOperation0 ???????lePendOperation ????????wpsStreamContinue0 ??????FwppStreamContinue ???????wpsCopyStreamDataToBuffer0 ??FwpsClassifyOptionSet0 ?????wpsRequestEndpointDeleteNotification0 ?????wpsCancelEndpointDeleteNotification0 ?????aleCancelDeleteNotification ??FwpsForceReclassifyLayer0 ???FwpiGetConnectionLuid0 ?????wpiIsConnectionEdgeTraversed0 ?wpsVirtualIfTunnelInfoGet0 ??FwpsVirtualIfTunnelInfoSet0 ??FwpsRedirectHandleCreate0 ???FwpsFlowAbort0 ?fpNblInfoAlloc FwppSetPacketInfo ???????FwpsAllocateNetBufferAndNetBufferList0 ?????disAllocateNetBufferAndNetBufferList ?????NdisAllocateCloneNetBufferList ?wppDeepCloneNetBufferList ???wpsAllocateCloneNetBufferList0 WfpNblInfoClone FwpsReassembleForwardFragmentGroup0 ??????SkipNetworkLayerHeaders ????NdisAllocateReassembledNetBufferList ??????wpsCloneStreamData0 ??????wppGetOrAllocNblInfoContainer ?wppSetTaggedContextList ????wppNetBufferListAssociateContext ???????FwpsNetBufferListAssociateContext0 ???????wpsNetBufferListAssociateContext1 ???????wpiNetBufferListAssociateContextWithoutDevice0 FwpsNetBufferListRetrieveContext0 ???????FwpsNetBufferListRemoveContext0 FwpiParseIPv6Protocol0 ?????wpsvSwitchNotifyComplete0 ???wpsvSwitchEventsSubscribe0 ??FwppvSwitchClientAllocate ???FwpsvSwitchEventsUnsubscribe0 ?FwpsAcquireClassifyHandle0 ???wpsPendClassify0 ???????FwpsAcquireWritableLayerDataPointer0 ??????wppInitInjectionHandleForInjectRawSend ????aleInitRawSessionState ?????WPS_ALE_ENDPOINT_CREATE0 ???FwpsInjectionHandleCreate0 ???wpsInjectionHandleDestroy0 ??FwppPrepareNetBufferListForInjection ??????wppAllocateDelayedInjectionContext ??????FwppInjectPrologue ???????wpsInjectForwardAsync0 ????FwpsInjectNetworkSendAsync0 ??FwpsInjectNetworkReceiveAsync0 ?wppInjectTransportSendAsync ??wpsInjectTransportReceiveAsync0 ????????wppStreamInjectPrologue ????wpsStreamInjectAsync0 ?????wppStreamInject ????????wpsConstructIpHeaderForTransportPacket0 ????leAcquireEndpointContext ???aleLookupNlSessionState ????buildIpHeaders ?wppPrepareL2NetBufferListsForInjection ????allocateNblContext ???????wppL2InjectPrologue ??????wppInjectMacAsync ???????wppInjectvSwitchAsync ?????xAllocatePoolWithTag ?????WfpPoolAllocNonPaged ??????fpPoolAllocQualified ?????ExAllocateFromNPagedLookasideList ???????WfpAllocFromNPagedLookasideList WfpUINT32Add ??fpUINT32Multiply ???????WfpUINT16Add ??esEncodeFixedBufferHandleCreate ????????fpMidlObjectInit ???????MesEncodeDynBufferHandleCreate ?FP_MIDL_ENCODE_FN ???????fpMidlObjectEncode ??????MesDecodeBufferHandleCreate ??WFP_MIDL_DECODE_FN ???????fpMidlObjectDecode ??????WfpMidlObjectCopy ???????N U L L ???<