struct _TOKEN_AUDIT_POLICY// Size=0x1e
{
    unsigned char PerUserPolicy[30];// Offset=0x0 Size=0x1e
};