Most Viewed in October 2022

This site had 29,342 visits in October 2022. The count of unique visitors looks to be lost because SSL certificate renewal restarted the statistics collection mid-month. The 13,382 and 15,960 visits before and after the restart were respectively from 10,452 and 11,407 unique visitors.

The list below is of document pages that were each viewed at least 100 times in the month. Ranks in parentheses are from September 2022. Faded titles are just index pages which I presume are viewed only or mainly on the way to others, especially while moving from one Table of Contents (TOC) to another. One of those index pages is just the skimpiest of placeholders, pending my writing an introduction, which I likely never will get round to. The TOCs are omitted entirely, as is the banner page, since none of these are meant to be seen independently of a document page.

That my off-and-on write-up of the KUSER_SHARED_DATA structure got thousands of visits is welcome but no surprise. Nor is it unwelcome that a thousand visits were made to my recently updated catalogue of Kernel-Power events. I wrote it precisely because I knew from commercial experience that a catalogue of these has real-world use: it’s all very well to see that some events got logged, even if Microsoft doesn’t trouble to provide plain-text descriptions, but what events might we have known to get logged had Microsoft documented the possibilities?

It’s always gratifying when my hobby pages about CPU features (as used by Windows) get attention. One got nearly 300 visits and three others made the arbitrary cut-off of 100 visits.

Totally mystifying is that 160 visits were made to my unfinished rant about the nonsense that CSS makes of styling whole columns in HTML tables. The people who work on standards committees undertake unenviable responsibilities and perhaps get by way of compensation some sort of standing in some sort of community, but I have not myself ever run into such a case of the standards leaving their community short.

This month brings the first appearance in the list of any of the pages that came from my looking at MS-DOS for the first time in decades. I find myself quite pleased with my documentation of int 21h function 30h. If something like it had been available in the late 80s, I might never have thought of disassembling executables to find what they really do.

Rank Page Visits
1 (24) KUSER_SHARED_DATA 4,938
2 (1) Geoff Chappell, Software Analyst 3,310
3 (4) Kernel32 Functions 1,225
4 (26) The Kernel-Power Event Provider 1,026
5 (3) PEB 968
6 (6) Kernel-Mode Windows 903
7 (2) NTDLL Exports 766
8 (10) BitLocker Policy Settings 740
9 (18) Licensed Memory in 32-Bit Windows Vista 717
10 (11) The Windows Explorer Command Line 628
11 (16) Win32 Programming 618
12 (14) ZwQuerySystemInformation 596
13 (15) Back Doors for Cross-Signed Drivers 567
14 (5) TEB 533
15 (22) Kernel Versions 504
16 (21) LDR_DATA_TABLE_ENTRY 492
17 (19) Native API Functions 489
18 (17) NTDLL 481
19 (8) EPROCESS 470
20 (23) SYSTEM_PROCESS_INFORMATION 363
21 (27) Shell 352
22 (20) SYSTEM_INFORMATION_CLASS 337
23 (25) ADVAPI32 Functions 328
24   CMPXCHG8 Support in the 32-bit Windows Kernel 285
25 (13) BCD Elements 282
26 (29) Notes 278
27 (39) SHELL32 Functions 277
28 (33) Microsoft Visual C++ 270
29 (31) PEB_LDR_DATA 242
30 (36) Feedback 235
31 (40) The Service Control Manager Event Provider 232
32 (30) Windows Kernel Exports 228
32 (67) KERNELBASE Functions 228
34 (34) SVCHOST 204
35 (51) Internet Explorer 202
36 (37) THREADINFOCLASS 201
37 (35) Edit Boot Options in Windows Vista 197
38 (7) SYSTEM_HANDLE_INFORMATION 196
39   Operation Aurora 193
40 (44) What's New? 189
41 (45) RtlSetProcessIsCritical 184
42 (56) Bug Check Codes 180
43 (47) Boot Options: nx 173
44 (38) KTHREAD 171
45 (41) Boot Configuration Data (BCD) 166
46 (28) About This Site 165
47 (52) Software Analysis by Reverse Engineering 163
48 (63) KERNEL32 Versions 162
49 (41) KPROCESS 161
50 (52) Consultation 160
50   Styling Table Columns with CSS 160
52 (54) iPod Support Service 159
53 (46) The API Set Schema 156
54 (68) RtlInitUnicodeString 149
55 (62) Licensed Driver Signing in Windows 10 142
55 (43) BCD Objects 142
57 (49) HAL Versions 140
58 (32) Disable Global Hot Keys 138
59 (9) SYSTEM_HANDLE_TABLE_ENTRY_INFO 134
60 (74) Boot Options: numproc 132
61 (48) KPCR 130
62 (65) Terms of Use 127
63   Event Tracing for Windows 126
64 (57) NTDLL Versions 122
64   SYSENTER and SYSEXIT in Windows 122
66 (61) Boot Options: detecthal 121
66 (54) RTL_PROCESS_MODULE_INFORMATION 121
66 (60) KPRCB (amd64) 121
66 (75) SYSTEM_BASIC_INFORMATION 121
66   CPU Identification Before CPUID 121
71   Predefined C++ Types 119
72 (58) ETHREAD 117
73   The Shell Core Provider 116
74 (66) The Boot Status Data Log 115
75   Compiler Options 114
76   The CPUID Instruction 111
77 (69) SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX 110
78 (70) The Microsoft Visual C++ Linker 109
78 (71) WND 109
80   Interrupt 21h Function 30h 108
81   The AARD Code 107
81   ETW Security 107
83   Windows API Sets 105
83   ADVAPI32 105
85 (73) Browsing Guide 104
86 (64) RTL_USER_PROCESS_PARAMETERS 102
86   Diagnostic Provider for SERVICES.EXE 102
87 (72) NtTraceControl 101