Most Viewed in November 2022

This site had 25,727 visits in November 2022 from 17,687 unique visitors.

The list below is of document pages that were each viewed at least 100 times in the month. Ranks in parentheses are from October 2022. Faded titles are just index pages which I presume are viewed only or mainly on the way to others, especially while moving from one Table of Contents (TOC) to another. One of those index pages is just the skimpiest of placeholders, pending my writing an introduction, which I likely never will get round to. The TOCs are omitted entirely, as is the banner page, since none of these are meant to be seen independently of a document page.

Since I write this website myself and many of its pages have tables, some with columns of numbers that would ideally be right-aligned—oh, like the one on this page—I derive no small personal satisfaction at seeing the increasing readership (229 this month) of my grumble about the mess that two decades of standards committees have made of the CSS styling HTML columns. I might better finish that page!

Also very pleasing, just personally, is that several of the pages from last year’s retrospection now make the arbitrary cut-off of 100 views per month and several more are bubbling under. These are about MS-DOS and the Windows that ran on MS-DOS. There’s little chance that I’ll return to finish them, but they’re not too bad as they are.

I will eventually find how it is that 155 readers (or maybe one 155 times) were directed to my old write-up of what Microsoft got away with in its supposed compliance with a settlement that was widely understood as requiring documentation of all Windows API functions that were used by Internet Explorer. The latter, in competition with other web browsers, was supposed to be programmed with no special knowledge of Windows, the monopoly product. But of course the Internet Explorer programmers had all sorts of special access. Back in 2004 when my write-up was fresh, I hadn’t scraped the surface. Since Windows 8 in 2012, symbol files have shown convincingly that URLMON, a DLL that was introduced for Internet Explorer and still has Internet Explorer version numbering, is built with access to the same headers that Microsoft’s kernel-mode programmers use for building Windows but which Microsoft doesn’t publish for everyone. Nobody cares now, I suppose, but the lesson to take away is that technology long ago got far too complicated. Now that governments make noises again about regulating technology, they would better remember to keep to the levers of economics and policy. Try enforcing anything about the technology and you’ll get rings run round you.

Rank Page Visits
1 (2) Geoff Chappell, Software Analyst 3,126
2 (3) Kernel32 Functions 1,305
3 (4) The Kernel-Power Event Provider 1,177
4 (5) PEB 1,125
5 (8) BitLocker Policy Settings 891
6 (6) Kernel-Mode Windows 875
7 (7) NTDLL Exports 753
8 (10) The Windows Explorer Command Line 735
9 (11) Win32 Programming 708
10 (13) Back Doors for Cross-Signed Drivers 593
11 (12) ZwQuerySystemInformation 580
12 (9) Licensed Memory in 32-Bit Windows Vista 569
13 (14) TEB 533
14 (16) LDR_DATA_TABLE_ENTRY 527
15 (20) SYSTEM_PROCESS_INFORMATION 511
16 (15) Kernel Versions 503
17 (19) EPROCESS 486
18 (17) Native API Functions 484
19 (1) KUSER_SHARED_DATA 451
20 (47) Software Analysis by Reverse Engineering 450
21 (18) NTDLL 424
22 (22) SYSTEM_INFORMATION_CLASS 403
23 (29) PEB_LDR_DATA 350
24 (21) Shell 346
25 (26) Notes 340
26 (23) ADVAPI32 Functions 308
27 (28) Microsoft Visual C++ 305
28 (46) About This Site 302
29 (27) SHELL32 Functions 285
30 (32) Windows Kernel Exports 280
31 (53) The API Set Schema 279
32 (36) THREADINFOCLASS 272
33 (38) SYSTEM_HANDLE_INFORMATION 271
34 (25) BCD Elements 266
35 (59) SYSTEM_HANDLE_TABLE_ENTRY_INFO 237
36 (50) Styling Table Columns with CSS 229
37 (37) Edit Boot Options in Windows Vista 227
38 (31) The Service Control Manager Event Provider 214
39 (32) KERNELBASE Functions 194
39 (35) Internet Explorer 194
41 (48) KERNEL32 Versions 189
42 (42) Bug Check Codes 185
43 (30) Feedback 181
44 (49) KPROCESS 173
45 (44) KTHREAD 172
45 (81) The AARD Code 172
47 (40) What's New? 169
48 (34) SVCHOST 168
49 (61) KPCR 165
50 (52) iPod Support Service 164
51 (45) Boot Configuration Data (BCD) 163
52 (64) NTDLL Versions 160
53 (41) RtlSetProcessIsCritical 157
54   Missing Settlement Functions 155
54 (86) RTL_USER_PROCESS_PARAMETERS 155
54 (54) RtlInitUnicodeString 155
54 (57) HAL Versions 155
58 (87) NtTraceControl 152
58 (50) Consultation 152
60 (43) Boot Options: nx 151
61   CSRSRV API Routines 149
61 (55) BCD Objects 149
63   ZwSetSystemInformation 141
64 (66) RTL_PROCESS_MODULE_INFORMATION 137
65 (58) Disable Global Hot Keys 135
65 (74) The Boot Status Data Log 135
67   RtlGetNtVersionNumbers 133
68 (72) ETHREAD 127
69 (62) Terms of Use 125
70   The AARD Code and DR DOS 124
71 (78) The Microsoft Visual C++ Linker 121
72 (60) Boot Options: numproc 120
73 (55) Licensed Driver Signing in Windows 10 119
74 (66) KPRCB (amd64) 118
75   Windows 3.1 in a Windows 95 Virtual Machine 117
76 (66) Boot Options: detecthal 116
77 (80) Interrupt 21h Function 30h 115
78 (78) WND 114
79   Viewing the Firmware Memory Map 113
79 (83) ADVAPI32 113
81   CPU Identification by the 32-Bit WIndows Kernel 111
82   Service Control Manager Events 110
83   SYSTEM_THREAD_INFORMATION 109
84   The First Run Page in Internet Explorer 107
85   Windows HAL Exports 106
85 (66) SYSTEM_BASIC_INFORMATION 106
85   EXPLORER Versions 106
88   Advanced Boot Options Menu in Windows Vista 105
88   SeparateExplorerFactory 105
88 (83) Windows API Sets 105
91 (71) Predefined C++ Types 104
91   COMCTL32 Versions 104
93 (24) CMPXCHG8 Support in the 32-bit Windows Kernel 103
94 (85) Browsing Guide 101
95 (66) CPU Identification Before CPUID 100