struct _TOKEN_AUDIT_POLICY// Size=0x1d
{
    unsigned char PerUserPolicy[29];// Offset=0x0 Size=0x1d
};