_TOKEN

Metadatacopy
struct _TOKEN {
    struct _TOKEN_SOURCE TokenSource;/* 0x0  16 */
    struct _LUID TokenId;/* 0x10  8 */
    struct _LUID AuthenticationId;/* 0x18  8 */
    struct _LUID ParentTokenId;/* 0x20  8 */
    union _LARGE_INTEGER ExpirationTime;/* 0x28  8 */
    struct _ERESOURCE* TokenLock;/* 0x30  8 */
    struct _LUID ModifiedId;/* 0x38  8 */
    /* ── cacheline 1 boundary (64 bytes) ── */
    struct _SEP_TOKEN_PRIVILEGES Privileges;/* 0x40  24 */
    struct _SEP_AUDIT_POLICY AuditPolicy;/* 0x58  28 */
    unsigned long SessionId;/* 0x74  4 */
    unsigned long UserAndGroupCount;/* 0x78  4 */
    unsigned long RestrictedSidCount;/* 0x7c  4 */
    /* ── cacheline 2 boundary (128 bytes) ── */
    unsigned long VariableLength;/* 0x80  4 */
    unsigned long DynamicCharged;/* 0x84  4 */
    unsigned long DynamicAvailable;/* 0x88  4 */
    unsigned long DefaultOwnerIndex;/* 0x8c  4 */
    struct _SID_AND_ATTRIBUTES* UserAndGroups;/* 0x90  8 */
    struct _SID_AND_ATTRIBUTES* RestrictedSids;/* 0x98  8 */
    void* PrimaryGroup;/* 0xa0  8 */
    unsigned long* DynamicPart;/* 0xa8  8 */
    struct _ACL* DefaultDacl;/* 0xb0  8 */
    enum _TOKEN_TYPE TokenType;/* 0xb8  4 */
    enum _SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;/* 0xbc  4 */
    /* ── cacheline 3 boundary (192 bytes) ── */
    unsigned long TokenFlags;/* 0xc0  4 */
    unsigned char TokenInUse;/* 0xc4  1 */
    /* 3 bytes padding */
    unsigned long IntegrityLevelIndex;/* 0xc8  4 */
    unsigned long MandatoryPolicy;/* 0xcc  4 */
    struct _SECURITY_TOKEN_PROXY_DATA* ProxyData;/* 0xd0  8 */
    struct _SECURITY_TOKEN_AUDIT_DATA* AuditData;/* 0xd8  8 */
    struct _SEP_LOGON_SESSION_REFERENCES* LogonSession;/* 0xe0  8 */
    struct _LUID OriginatingLogonSession;/* 0xe8  8 */
    struct _SID_AND_ATTRIBUTES_HASH SidHash;/* 0xf0  272 */
    /* ── cacheline 8 boundary (512 bytes) ── */
    struct _SID_AND_ATTRIBUTES_HASH RestrictedSidHash;/* 0x200  272 */
    /* ── cacheline 12 boundary (768 bytes) ── */
    unsigned __int64 VariablePart;/* 0x310  8 */
};