ScriptBlockText:AddSecurityPackage* OR ScriptBlockText:AdjustTokenPrivileges* OR ScriptBlockText:CloseHandle* OR ScriptBlockText:CreateProcessWithToken* OR ScriptBlockText:CreateRemoteThread* OR ScriptBlockText:CreateThread* OR ScriptBlockText:CreateUserThread* OR ScriptBlockText:DangerousGetHandle* OR ScriptBlockText:DuplicateTokenEx* OR ScriptBlockText:EnumerateSecurityPackages* OR ScriptBlockText:FreeLibrary* OR ScriptBlockText:GetDelegateForFunctionPointer* OR ScriptBlockText:GetLogonSessionData* OR ScriptBlockText:GetModuleHandle* OR ScriptBlockText:GetProcAddress* OR ScriptBlockText:GetProcessHandle* OR ScriptBlockText:GetTokenInformation* OR ScriptBlockText:ImpersonateLoggedOnUser* OR ScriptBlockText:LoadLibrary* OR ScriptBlockText:memcpy* OR ScriptBlockText:MiniDumpWriteDump* OR ScriptBlockText:OpenDesktop* OR ScriptBlockText:OpenProcess* OR ScriptBlockText:OpenProcessToken* OR ScriptBlockText:OpenThreadToken* OR ScriptBlockText:OpenWindowStation* OR ScriptBlockText:QueueUserApc* OR ScriptBlockText:ReadProcessMemory* OR ScriptBlockText:RevertToSelf* OR ScriptBlockText:RtlCreateUserThread* OR ScriptBlockText:SetThreadToken* OR ScriptBlockText:VirtualAlloc* OR ScriptBlockText:VirtualFree* OR ScriptBlockText:VirtualProtect* OR ScriptBlockText:WaitForSingleObject* OR ScriptBlockText:WriteInt32* OR ScriptBlockText:WriteProcessMemory* OR ScriptBlockText:ZeroFreeGlobalAllocUnicode*