netsh advfirewall firewall add rule name="RULENAME" dir=[in/out] action=[allow/block/bypass] protocol=[tcp/udp] localip=[any] remoteip=[any]
netsh advfirewall firewall add rule name="Block My EXE" dir=out program="c:\Program Files\Folder\blockme.exe" profile=any action=block
netsh advfirewall firewall add rule name="allowPort80" dir=in action=allow protocol=TCP localport=80