(ScriptBlockText:VirtualAlloc* ScriptBlockText:OpenProcess* ScriptBlockText:WriteProcessMemory* ScriptBlockText:CreateRemoteThread*) OR (ScriptBlockText:OpenProcessToken* ScriptBlockText:LookupPrivilegeValue* ScriptBlockText:AdjustTokenPrivileges*) OR (ScriptBlockText:OpenProcessToken* ScriptBlockText:DuplicateTokenEx* ScriptBlockText:CloseHandle*) OR (ScriptBlockText:WriteProcessMemory* ScriptBlockText:VirtualAlloc* ScriptBlockText:ReadProcessMemory* ScriptBlockText:VirtualFree*)