If you're already able to MITM the user, what about - patching (more .. corrupting) binaries, hoping to break Windows Update - intercepting and replacing the

If you're already able to MITM the user, what about - patching (more .. corrupting) binaries, hoping to break Windows Update - intercepting and replacing the top 5 'Make Windows Update work again' downloads with a (signed if you want) application of your own? Bonus points for injecting 'Already got this host' into requests from now on, so that Windows update magically starts working again..