_EPARTITION

//0x90 bytes (sizeof) struct _EPARTITION { VOID* MmPartition; //0x0 VOID* CcPartition; //0x8 VOID* ExPartition; //0x10 VOID* SmPartition; //0x18 VOID* PfPartition; //0x20 LONGLONG HardReferenceCount; //0x28 LONGLONG OpenHandleCount; //0x30 struct _LIST_ENTRY ActivePartitionLinks; //0x38 struct _EPARTITION* ParentPartition; //0x48 struct _WORK_QUEUE_ITEM TeardownWorkItem; //0x50 struct _EX_PUSH_LOCK TeardownLock; //0x70 struct _EPROCESS* SystemProcess; //0x78 VOID* SystemProcessHandle; //0x80 union { ULONG PartitionFlags; //0x88 ULONG PairedWithJob:1; //0x88 }; };