if((Test-Path -LiteralPath "HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice") -ne $true) { New-Item "HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice" -force -ea SilentlyContinue }; if((Test-Path -LiteralPath "HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\Parameters") -ne $true) { New-Item "HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\Parameters" -force -ea SilentlyContinue }; if((Test-Path -LiteralPath "HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\Security") -ne $true) { New-Item "HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\Security" -force -ea SilentlyContinue }; if((Test-Path -LiteralPath "HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\TriggerInfo") -ne $true) { New-Item "HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\TriggerInfo" -force -ea SilentlyContinue }; if((Test-Path -LiteralPath "HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\TriggerInfo\0") -ne $true) { New-Item "HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\TriggerInfo\0" -force -ea SilentlyContinue }; if((Test-Path -LiteralPath "HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\TriggerInfo\1") -ne $true) { New-Item "HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\TriggerInfo\1" -force -ea SilentlyContinue }; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice' -Name 'DelayedAutoStart' -Value 1 -PropertyType DWord -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice' -Name 'DependOnService' -Value @("rpcss") -PropertyType MultiString -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice' -Name 'Description' -Value '@%SystemRoot%\system32\dmwappushsvc.dll,-201' -PropertyType String -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice' -Name 'DisplayName' -Value '@%SystemRoot%\system32\dmwappushsvc.dll,-200' -PropertyType String -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice' -Name 'ErrorControl' -Value 1 -PropertyType DWord -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice' -Name 'FailureActions' -Value ([byte[]](0x80,0x51,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x04,0x00,0x00,0x00,0x14,0x00,0x00,0x00,0x01,0x00,0x00,0x00,0x10,0x27,0x00,0x00,0x01,0x00,0x00,0x00,0x10,0x27,0x00,0x00,0x01,0x00,0x00,0x00,0x10,0x27,0x00,0x00,0x00,0x00,0x00,0x00,0x10,0x27,0x00,0x00)) -PropertyType Binary -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice' -Name 'ImagePath' -Value '%SystemRoot%\system32\svchost.exe -k netsvcs -p' -PropertyType ExpandString -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice' -Name 'ObjectName' -Value 'LocalSystem' -PropertyType String -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice' -Name 'ServiceSidType' -Value 1 -PropertyType DWord -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice' -Name 'Start' -Value 2 -PropertyType DWord -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice' -Name 'StateFlags' -Value 1 -PropertyType DWord -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice' -Name 'Type' -Value 32 -PropertyType DWord -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\Parameters' -Name 'IdleTimeout(sec)' -Value 120 -PropertyType DWord -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\Parameters' -Name 'ServiceDll' -Value '%SystemRoot%\system32\dmwappushsvc.dll' -PropertyType ExpandString -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\Parameters' -Name 'ServiceDllUnloadOnStop' -Value 1 -PropertyType DWord -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\Parameters' -Name 'ServiceMain' -Value 'ServiceMain' -PropertyType String -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\Security' -Name 'Security' -Value ([byte[]](0x01,0x00,0x04,0x80,0xb0,0x00,0x00,0x00,0xbc,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x14,0x00,0x00,0x00,0x02,0x00,0x9c,0x00,0x07,0x00,0x00,0x00,0x00,0x00,0x14,0x00,0x8d,0x01,0x02,0x00,0x01,0x01,0x00,0x00,0x00,0x00,0x00,0x05,0x04,0x00,0x00,0x00,0x00,0x00,0x14,0x00,0x8d,0x01,0x02,0x00,0x01,0x01,0x00,0x00,0x00,0x00,0x00,0x05,0x06,0x00,0x00,0x00,0x00,0x00,0x14,0x00,0xff,0x01,0x0f,0x00,0x01,0x01,0x00,0x00,0x00,0x00,0x00,0x05,0x12,0x00,0x00,0x00,0x00,0x00,0x18,0x00,0xff,0x01,0x0f,0x00,0x01,0x02,0x00,0x00,0x00,0x00,0x00,0x05,0x20,0x00,0x00,0x00,0x20,0x02,0x00,0x00,0x00,0x00,0x18,0x00,0x14,0x00,0x00,0x00,0x01,0x02,0x00,0x00,0x00,0x00,0x00,0x0f,0x02,0x00,0x00,0x00,0x01,0x00,0x00,0x00,0x00,0x00,0x14,0x00,0x14,0x00,0x00,0x00,0x01,0x01,0x00,0x00,0x00,0x00,0x00,0x05,0x04,0x00,0x00,0x00,0x00,0x00,0x14,0x00,0x14,0x00,0x00,0x00,0x01,0x01,0x00,0x00,0x00,0x00,0x00,0x05,0x0b,0x00,0x00,0x00,0x01,0x01,0x00,0x00,0x00,0x00,0x00,0x05,0x12,0x00,0x00,0x00,0x01,0x01,0x00,0x00,0x00,0x00,0x00,0x05,0x12,0x00,0x00,0x00)) -PropertyType Binary -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\TriggerInfo\0' -Name 'Action' -Value 1 -PropertyType DWord -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\TriggerInfo\0' -Name 'Data0' -Value ([byte[]](0x37,0x00,0x39,0x00,0x35,0x00,0x42,0x00,0x36,0x00,0x42,0x00,0x46,0x00,0x39,0x00,0x2d,0x00,0x39,0x00,0x37,0x00,0x42,0x00,0x36,0x00,0x2d,0x00,0x34,0x00,0x46,0x00,0x38,0x00,0x39,0x00,0x2d,0x00,0x42,0x00,0x44,0x00,0x38,0x00,0x44,0x00,0x2d,0x00,0x32,0x00,0x46,0x00,0x34,0x00,0x32,0x00,0x42,0x00,0x42,0x00,0x42,0x00,0x45,0x00,0x39,0x00,0x39,0x00,0x36,0x00,0x45,0x00,0x00,0x00)) -PropertyType Binary -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\TriggerInfo\0' -Name 'DataType0' -Value 2 -PropertyType DWord -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\TriggerInfo\0' -Name 'GUID' -Value ([byte[]](0x67,0xd1,0x90,0xbc,0x70,0x94,0x39,0x41,0xa9,0xba,0xbe,0x0b,0xbb,0xf5,0xb7,0x4d)) -PropertyType Binary -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\TriggerInfo\0' -Name 'Type' -Value 6 -PropertyType DWord -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\TriggerInfo\1' -Name 'Action' -Value 1 -PropertyType DWord -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\TriggerInfo\1' -Name 'Data0' -Value ([byte[]](0x75,0x90,0xbc,0xa3,0x28,0x00,0x92,0x13)) -PropertyType Binary -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\TriggerInfo\1' -Name 'DataType0' -Value 1 -PropertyType DWord -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\TriggerInfo\1' -Name 'GUID' -Value ([byte[]](0x16,0x28,0x7a,0x2d,0x5e,0x0c,0xfc,0x45,0x9c,0xe7,0x57,0x0e,0x5e,0xcd,0xe9,0xc9)) -PropertyType Binary -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath 'HKLM:\SYSTEM\CurrentControlSet\Services\dmwappushservice\TriggerInfo\1' -Name 'Type' -Value 7 -PropertyType DWord -Force -ea SilentlyContinue;