Implement CreateProcessAsUser[A/W] and LogonUserW with a fake token.
drwxr-xr-x - freeldr
drwxr-xr-x - os2
drwxr-xr-x - posix
drwxr-xr-x - reactos
drwxr-xr-x - rosapps