ReadProcessMemory
OpenProcess
WTSQueryUserToken 
GetTokenInformation
CloseHandle
DuplicateHandle
GetFileSizeEx