Min versionXP
Max version10 TH2
x86 offset
offset:bitpos
Field Name
0x0000void *
ClientToken
0x0004enum _SECURITY_IMPERSONATION_LEVEL
ImpersonationLevel
0x0008void *
PrimaryToken
0x000Cvoid *
ProcessAuditId