struct _ETW_PARTITION_CONTEXT// Size=0x8
{
    struct _EPARTITION * Partition;// Offset=0x0 Size=0x8
};