//0x90 bytes (sizeof)
struct _EPARTITION
{
VOID* MmPartition; //0x0
VOID* CcPartition; //0x8
VOID* ExPartition; //0x10
VOID* SmPartition; //0x18
VOID* PfPartition; //0x20
LONGLONG HardReferenceCount; //0x28
LONGLONG OpenHandleCount; //0x30
struct _LIST_ENTRY ActivePartitionLinks; //0x38
struct _EPARTITION* ParentPartition; //0x48
struct _WORK_QUEUE_ITEM TeardownWorkItem; //0x50
struct _EX_PUSH_LOCK TeardownLock; //0x70
struct _EPROCESS* SystemProcess; //0x78
VOID* SystemProcessHandle; //0x80
union
{
ULONG PartitionFlags; //0x88
ULONG PairedWithJob:1; //0x88
};
};