IN HANDLE ThreadHandle,
IN HANDLE ThreadToImpersonate,
IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService );
Function NtImpersonateThread assigns one thread's token to another. If source thread don't have associated Token Object, function use process'es token to impersonate destination thread.
ThreadHandle
HANDLE to source Thread Object.
ThreadToImpersonate
HANDLE to destination Thread Object opened with THREAD_IMPERSONATE access.