struct _ETW_PARTITION_CONTEXT// Size=0x4
{
    struct _EPARTITION * Partition;// Offset=0x0 Size=0x4
};