struct _PS_IMPERSONATION_INFORMATION {
void* Token;/* 0x0 4 */
unsigned char CopyOnOpen;/* 0x4 1 */
unsigned char EffectiveOnly;/* 0x5 1 */
/* 2 bytes padding */
int ImpersonationLevel;/* 0x8 4 */
};
/* source: NT 4.0 DDK (August 1996) PPC LIBCNTPR.LIB CodeView type records; _EPROCESS/_ETHREAD offsets match KDEXTPPC.DLL (NT 4.0 Server CD) */