//0x1e8 bytes (sizeof)
struct _TOKEN
{
struct _TOKEN_SOURCE TokenSource; //0x0
struct _LUID TokenId; //0x10
struct _LUID AuthenticationId; //0x18
struct _LUID ParentTokenId; //0x20
union _LARGE_INTEGER ExpirationTime; //0x28
struct _ERESOURCE* TokenLock; //0x30
struct _LUID ModifiedId; //0x34
struct _SEP_TOKEN_PRIVILEGES Privileges; //0x40
struct _SEP_AUDIT_POLICY AuditPolicy; //0x58
ULONG SessionId; //0x74
ULONG UserAndGroupCount; //0x78
ULONG RestrictedSidCount; //0x7c
ULONG VariableLength; //0x80
ULONG DynamicCharged; //0x84
ULONG DynamicAvailable; //0x88
ULONG DefaultOwnerIndex; //0x8c
struct _SID_AND_ATTRIBUTES* UserAndGroups; //0x90
struct _SID_AND_ATTRIBUTES* RestrictedSids; //0x94
VOID* PrimaryGroup; //0x98
ULONG* DynamicPart; //0x9c
struct _ACL* DefaultDacl; //0xa0
enum _TOKEN_TYPE TokenType; //0xa4
enum _SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; //0xa8
ULONG TokenFlags; //0xac
UCHAR TokenInUse; //0xb0
ULONG IntegrityLevelIndex; //0xb4
ULONG MandatoryPolicy; //0xb8
struct _SECURITY_TOKEN_PROXY_DATA* ProxyData; //0xbc
struct _SECURITY_TOKEN_AUDIT_DATA* AuditData; //0xc0
struct _SEP_LOGON_SESSION_REFERENCES* LogonSession; //0xc4
struct _LUID OriginatingLogonSession; //0xc8
struct _SID_AND_ATTRIBUTES_HASH SidHash; //0xd0
struct _SID_AND_ATTRIBUTES_HASH RestrictedSidHash; //0x158
ULONG VariablePart; //0x1e0
};