copy
//0x1e bytes (sizeof)
struct _TOKEN_AUDIT_POLICY
{
    UCHAR PerUserPolicy[30];                                                //0x0
};