VOID __stdcall EtwpCovSampCaptureRebalanceDpc(
KDPC *Dpc,
PVOID DeferredContext,
PVOID SystemArgument1,
PVOID SystemArgument2){
*((_DWORD *)DeferredContext + 175) = KUSER_SHARED_DATA.TickCount.LowPart;
KeSetEvent((PRKEVENT)DeferredContext + 28, 0);
}