Edit C:\Windows\SysWOW64\rpcnsh.dll
MZ? ÿÿ ¸ @ à º ´ Í!¸LÍ!This program cannot be run in DOS mode. $ ½Ä:ùtªiùtªiùtªi$?giûtªi$?di÷tªiùt«i«tªi$?aiêtªi$?`iøtªi$?yiütªi$?ciøtªi$?fiøtªiRichùtªi PE L ?HPT à ! L * PR ` ° ? @A àZ K 0? È ? À p ð' \ ? , .text +K L `.data 0 ` P @ À.idata ? T @ @.rsrc ? ^ @ @.reloc À d @ B 0P °( ) * + ?1 °1 Ð1 p2 @B ÀB pC C àF `I °I 0P PR ?U 0X `X X ?HPT # L( L Ðb c a d d d e l e t e r e s e t s h o w f i l t e r c o n d i t i o n r u l e t e s t rpcnsh.dll r p c ?)~À1?&D?\×ëºPö?÷R(Yo_G??ÅÓ;a)u D e f a u l t A d d L i s t D e l e t e L i s t % 1 ! S ! U n k n o w n s e l e c t i v e b i n d i n g f o r m a t S u b n e t I n t e r f a c e S t a t u s D e s c r i p t i o n % 1 ! - 1 6 S ! E n a b l e d % 1 ! - 9 s ! D i s a b l e d % 1 ! S ! % 1 ! S ! %S s e t t i n g s i n t e r f a c e s u m e p m a p e p _ a d d p r o x y _ c o n n p r o x y _ i f r e m o t e _ u s e r _ t o k e n i f _ u u i d i f _ v e r s i o n i f _ f l a g d c o m _ a p p _ i d i m a g e _ n a m e p r o t o c o l a u t h _ t y p e a u t h _ l e v e l s e c _ e n c r y p t _ a l g s e c _ k e y _ s i z e l o c a l _ a d d r _ v 4 l o c a l _ a d d r _ v 6 l o c a l _ p o r t p i p e r e m o t e _ a d d r _ v 4 r e m o t e _ a d d r _ v 6 p r o c e s s _ w i t h _ i f _ u u i d e p _ v a l u e e p _ f l a g s c l i e n t _ t o k e n s e r v e r _ n a m e s e r v e r _ p o r t p r o x y _ a u t h _ t y p e c l i e n t _ c e r t _ k e y _ l e n g t h c l i e n t _ c e r t _ o i d b l o c k p e r m i t c o n t i n u e e q u a l g r e a t e r l e s s g r e a t e r _ o r _ e q u a l l e s s _ o r _ e q u a l r a n g e a l l _ s e t a n y _ s e t n o n e _ s e t F W P _ M A T C H _ E Q U A L F W P _ M A T C H _ G R E A T E R F W P _ M A T C H _ L E S S F W P _ M A T C H _ G R E A T E R _ O R _ E Q U A L F W P _ M A T C H _ L E S S _ O R _ E Q U A L F W P _ M A T C H _ R A N G E F W P _ M A T C H _ F L A G S _ A L L _ S E T F W P _ M A T C H _ F L A G S _ A N Y _ S E T F W P _ M A T C H _ F L A G S _ N O N E _ S E T F W P _ E M P T Y F W P _ U I N T 8 F W P _ U I N T 1 6 F W P _ U I N T 3 2 F W P _ U I N T 6 4 F W P _ I N T 8 F W P _ I N T 1 6 F W P _ I N T 3 2 F W P _ I N T 6 4 F W P _ F L O A T F W P _ D O U B L E F W P _ B Y T E _ A R R A Y 1 6 _ T Y P E F W P _ B Y T E _ B L O B _ T Y P E F W P _ S E C U R I T Y _ D E S C R I P T O R _ T Y P E F W P _ T O K E N _ A C C E S S _ I N F O R M A T I O N _ T Y P E % 0 8 l x - % 0 4 h x - % 0 4 h x - % 0 2 h x % 0 2 h x - % 0 2 h x % 0 2 h x % 0 2 h x % 0 2 h x % 0 2 h x % 0 2 h x W S A S t a r t u p % s % 0 2 h x C o n v e r t S t r i n g S e c u r i t y D e s c r i p t o r T o S e c u r i t y D e s c r i p t o r % 1 ! 0 8 l x ! - % 2 ! 0 4 x ! - % 3 ! 0 4 x ! - % 4 ! 0 2 x ! % 5 ! 0 2 x ! - % 6 ! 0 2 x ! % 7 ! 0 2 x ! % 8 ! 0 2 x ! % 9 ! 0 2 x ! % 1 0 ! 0 2 x ! % 1 1 ! 0 2 x ! % 1 ! 0 8 l x ! % 2 ! 0 8 l x ! % 3 ! 0 8 l x ! % 4 ! 0 8 l x ! % 1 ! l s ! % 1 ! S ! % 1 ! 0 2 x ! C o n v e r t S e c u r i t y D e s c r i p t o r T o S t r i n g S e c u r i t y D e s c r i p t o r % 1 ! s ! 0 x % x % h d RpcpFwpmEngineOpenLocal R P C F i l t e r R P C F i l t e r RpcpFwpmFilterAdd RpcpFwpmEngineCloseLocal T y p e : V a l u e : E m p t y 0 x % 1 ! x ! % 1 ! d ! - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - f i l t e r K e y : d i s p l a y D a t a . n a m e : % 1 ! s ! d i s p l a y D a t a . d e s c r i p t i o n : % 1 ! s ! f i l t e r I d : 0 x % 1 ! x ! l a y e r K e y : w e i g h t : a c t i o n . t y p e : A u d i t : E n a b l e n u m F i l t e r C o n d i t i o n s : % 1 ! d ! f i l t e r C o n d i t i o n [ % 1 ! d ! ] f i e l d K e y : m a t c h T y p e : c o n d i t i o n V a l u e : FwGetAllRpcFiltersEnumNextFilter FwGetAllRpcFiltersEnumBegin RpcpFwpmFilterDeleteByKey UuidCreateNil failed: 0x%x F i l t e r K e y : f i l t e r k e y a l l f i e l d m a t c h t y p e d a t a n c a c n _ i p _ t c p 1 n c a c n _ n p 2 n c a c n _ h t t p 4 l a y e r a c t i o n t y p e p e r s i s t e n c e a u d i t v o l a t i l e e n a b l e U u i d C r e a t e S e q u e n t i a l There is a pending rule. Delete or commit it before adding a new one Not enough paramters ParseRule failed: 0x%x Conditon tuple is missing one or more fields ParseConditionAdd failed 0x%x Filter Added NewRpcfilter failed 0x%x ¸ Ü ì , D X l ? ¤ À Ü ø < \ ? ? ° Ì ä ü L à&