copy
//0x1b bytes (sizeof)
struct _TOKEN_AUDIT_POLICY
{
    UCHAR PerUserPolicy[27];                                                //0x0
};