Windows® Internals, Sixth Edition, Part 1

You can use the kernel debugger to dump all the current registered timers on the system, as well as information on the DPC associated with each timer (if any). See the following output for a sample:[lkd> !timer Dump system timers Interrupt time: 61876995 000003df [ 4/ 5/2010 18:58:09.189] List Timer Interrupt Low/High Fire Time DPC/thread PROCESSOR 0 (nt!_KTIMER_TABLE fffff80001bfd080) 5 fffffa8003099810 627684ac 000003df [ 4/ 5/2010 18:58:10.756] NDIS!ndisMTimerObjectDpc (DPC @ fffffa8003099850) 13 fffffa8003027278 272dde78 000004cf [ 4/ 6/2010 23:34:30.510] NDIS!ndisMWakeUpDpcX (DPC @ fffffa80030272b8) fffffa8003029278 272e0588 000004cf [ 4/ 6/2010 23:34:30.511] NDIS!ndisMWakeUpDpcX (DPC @ fffffa80030292b8) fffffa8003025278 272e0588 000004cf [ 4/ 6/2010 23:34:30.511] NDIS!ndisMWakeUpDpcX (DPC @ fffffa80030252b8) fffffa8003023278 272e2c99 000004cf [ 4/ 6/2010 23:34:30.512] NDIS!ndisMWakeUpDpcX (DPC @ fffffa80030232b8) 16 fffffa8006096c20 6c1613a6 000003df [ 4/ 5/2010 18:58:26.901] thread fffffa8006096b60 19 fffff80001c85c40 64f9aeb5 000003df [ 4/ 5/2010 18:58:14.971] nt!CmpLazyFlushDpcRoutine (DPC @ fffff80001c85c00) 31 fffffa8002c43660 P dc527b9b 000003e8 [ 4/ 5/2010 20:06:00.673] intelppm!LongCapTraceDpc (DPC @ fffffa8002c436a0) 40 fffff80001c86f60 62ca1080 000003df [ 4/ 5/2010 18:58:11.304] nt!CcScanDpc (DPC @ fffff80001c86f20) fffff88004039710 62ca1080 000003df [ 4/ 5/2010 18:58:11.304] luafv!ScavengerTimerRoutine (DPC @ fffff88004039750) ... 252 fffffa800458ed50 62619a91 000003df [ 4/ 5/2010 18:58:10.619] netbt!TimerExpiry (DPC @ fffffa800458ed10) fffffa8004599b60 fe2fc6ce 000003e0 [ 4/ 5/2010 19:09:41.514] netbt!TimerExpiry (DPC @ fffffa8004599b20) PROCESSOR 1 (nt!_KTIMER_TABLE fffff880009ba380) 0 fffffa8004ec9700 626be121 000003df [ 4/ 5/2010 18:58:10.686] thread fffffa80027f3060 fffff80001c84dd0 P 70b3f446 000003df [ 4/ 5/2010 18:58:34.647] nt!IopIrpStackProfilerTimer (DPC @ fffff80001c84e10) 11 fffffa8005c26cd0 62859842 000003df [ 4/ 5/2010 18:58:10.855] afd!AfdTimeoutPoll (DPC @ fffffa8005c26c90) fffffa8002ce8160 6e6c45f4 000003df [ 4/ 5/2010 18:58:30.822] thread fffffa80053c2b60 fffffa8004fdb3d0 77f0c2cb 000003df [ 4/ 5/2010 18:58:46.789] thread fffffa8004f4bb60 13 fffffa8005051c20 60713a93 800003df [ NEVER ] thread fffffa8005051b60 15 fffffa8005ede120 77f9fb8c 000003df [ 4/ 5/2010 18:58:46.850] thread fffffa8005ede060 20 fffffa8004f40ef0 629a3748 000003df [ 4/ 5/2010 18:58:10.990] thread fffffa8004f4bb60 22 fffffa8005195120 6500ec7a 000003df [ 4/ 5/2010 18:58:15.019] thread fffffa8005195060 28 fffffa8004760e20 62ad4e07 000003df [ 4/ 5/2010 18:58:11.115] btaudio (DPC @ fffffa8004760e60)+12d10 31 fffffa8002c40660 P dc527b9b 000003e8 [ 4/ 5/2010 20:06:00.673] intelppm!LongCapTraceDpc (DPC @ fffffa8002c406a0) ... 232 fffff80001c85040 P 62317a00 000003df [ 4/ 5/2010 18:58:10.304] nt!IopTimerDispatch (DPC @ fffff80001c85080) fffff80001c26fc0 P 6493d400 000003df [ 4/ 5/2010 18:58:14.304] nt!EtwpAdjustBuffersDpcRoutine (DPC @ fffff80001c26f80) 235 fffffa80047471a8 6238ba5c 000003df [ 4/ 5/2010 18:58:10.351] stwrt64 (DPC @ fffffa80047471e8)+67d4 242 fffff880023ae480 11228580 000003e1 [ 4/ 5/2010 19:10:13.304] dfsc!DfscTimerDispatch (DPC @ fffff880023ae4c0) 245 fffff800020156b8 P 72fb2569 000003df [ 4/ 5/2010 18:58:38.469] hal!HalpCmcDeferredRoutine (DPC @ fffff800020156f8) 248 fffffa80029ee460 P 62578455 000003df [ 4/ 5/2010 18:58:10.553] ataport!IdePortTickHandler (DPC @ fffffa80029ee4a0) fffffa8002776460 P 62578455 000003df [ 4/ 5/2010 18:58:10.553] ataport!IdePortTickHandler (DPC @ fffffa80027764a0) fffff88001678500 fe2f836f 000003e0 [ 4/ 5/2010 19:09:41.512] cng!seedFileDpcRoutine (DPC @ fffff880016784c0) fffff80001c25b80 885e52b3 0064a048 [12/31/2099 23:00:00.008] nt!ExpCenturyDpcRoutine (DPC @ fffff80001c25bc0) Total Timers: 254, Maximum List: 8