_TOKEN

//0x1e8 bytes (sizeof) struct _TOKEN { struct _TOKEN_SOURCE TokenSource; //0x0 struct _LUID TokenId; //0x10 struct _LUID AuthenticationId; //0x18 struct _LUID ParentTokenId; //0x20 union _LARGE_INTEGER ExpirationTime; //0x28 struct _ERESOURCE* TokenLock; //0x30 struct _LUID ModifiedId; //0x34 struct _SEP_TOKEN_PRIVILEGES Privileges; //0x40 struct _SEP_AUDIT_POLICY AuditPolicy; //0x58 ULONG SessionId; //0x74 ULONG UserAndGroupCount; //0x78 ULONG RestrictedSidCount; //0x7c ULONG VariableLength; //0x80 ULONG DynamicCharged; //0x84 ULONG DynamicAvailable; //0x88 ULONG DefaultOwnerIndex; //0x8c struct _SID_AND_ATTRIBUTES* UserAndGroups; //0x90 struct _SID_AND_ATTRIBUTES* RestrictedSids; //0x94 VOID* PrimaryGroup; //0x98 ULONG* DynamicPart; //0x9c struct _ACL* DefaultDacl; //0xa0 enum _TOKEN_TYPE TokenType; //0xa4 enum _SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; //0xa8 ULONG TokenFlags; //0xac UCHAR TokenInUse; //0xb0 ULONG IntegrityLevelIndex; //0xb4 ULONG MandatoryPolicy; //0xb8 struct _SECURITY_TOKEN_PROXY_DATA* ProxyData; //0xbc struct _SECURITY_TOKEN_AUDIT_DATA* AuditData; //0xc0 struct _SEP_LOGON_SESSION_REFERENCES* LogonSession; //0xc4 struct _LUID OriginatingLogonSession; //0xc8 struct _SID_AND_ATTRIBUTES_HASH SidHash; //0xd0 struct _SID_AND_ATTRIBUTES_HASH RestrictedSidHash; //0x158 ULONG VariablePart; //0x1e0 };