copy
//0x1d bytes (sizeof)
struct _TOKEN_AUDIT_POLICY
{
    UCHAR PerUserPolicy[29];                                                //0x0
};