TimerMiscFlags

While introducing the TimerControlFlags at offset 0x01 in the DISPATCHER_HEADER for Timer objects, Windows 7 also made bit fields at offset 0x03, where there had been a boolean Inserted since version 4.0:

UCHAR Index: 1;

UCHAR Index: 6;

UCHAR Processor : 5;

UCHAR Inserted : 1;

UCHAR volatile Expired : 1;

In Microsoft’s C-language definition in WDM.H, the Processor member is explicitly x86-specific in version 6.1. Starting with the Windows Driver Kit (WDK) for Windows 8, the presence of Processor in the header is instead determined by the macro KENCODED_TIMER_PROCESSOR, which is defined only for x86 builds. Either way, the Processor is squeezed into the header for x86 builds because there is no space for it elsewhere in the KTIMER, whose size is fixed for compatibility reasons. The x64 builds have it deeper into the KTIMER, in four bytes of otherwise unused space left by the alignment requirements of 8-byte pointers.