Metadatacopystruct _PS_IMPERSONATION_INFORMATION { void* Token;/* 0x0 4 */ unsigned char CopyOnOpen;/* 0x4 1 */ unsigned char EffectiveOnly;/* 0x5 1 */ /* 2 bytes padding */ int ImpersonationLevel;/* 0x8 4 */};/* source: NT 4.0 DDK (August 1996) MIPS LIBCNTPR.LIB CodeView type records; _EPROCESS/_ETHREAD offsets match KDEXTMIP.DLL (NT 4.0 Server CD) */