Most Viewed in April 2021

This site had 19,810 visits in April 2021 from 13,995 unique visitors. That’s 660 visits per day. Collectively, they downloaded 97,482 pages.

The list below is of document pages that were each viewed at least 100 times in the month. Ranks in parentheses are from March 2021. Faded titles are just index pages which I presume are viewed only or mainly on the way to others, especially while moving from one Table of Contents (TOC) to another. One of those index pages is just the skimpiest of placeholders, pending my writing an introduction, which I likely never will get round to. The TOCs are omitted entirely, as is the banner page, since none of these are meant to be seen independently of a document page.

Clearly, there’s a lot more user-mode interest than kernel-mode. That a decade-old throw-way page about the Windows Explorer’s command-line switches gets nearly 20 views a day is just embarrassing, but I will take note that the most-viewed pages of technical cataloguing are of functions exported from KERNEL32 and NTDLL. I haven’t updated these even roughly for myself in years. They still go no further than the original Windows 10. Updates surely would have happened anyway when I get to these pages as part of the site’s ongoing (but slowing) reworking of scripts and style sheets. But I will move these ahead.

Rank Page Visits
1 (1) Geoff Chappell, Software Analyst 2,824
2 (3) Kernel-Mode Windows 1,020
3 (2) Kernel32 Functions 1,011
4 (5) Licensed Memory in 32-Bit Windows Vista 727
5 (6) NTDLL Exports 694
6 (8) PEB 581
7 (7) The Windows Explorer Command Line 571
8 (9) Win32 Programming 535
9 (11) ZwQuerySystemInformation 425
10 (10) The Kernel-Power Event Provider 404
11 (18) NTDLL 359
12 (14) Native API Functions 358
13 (15) Back Doors for Cross-Signed Drivers 337
14 (17) Windows Kernel Exports 332
15 (12) EPROCESS 330
16 (15) SYSTEM_PROCESS_INFORMATION 325
17 (13) SYSTEM_INFORMATION_CLASS 320
18 (22) Notes 298
18 (20) ADVAPI32 Functions 298
20 (19) BCD Elements 295
21 (22) KUSER_SHARED_DATA 292
22 (30) Boot Configuration Data (BCD) 291
23 (26) Shell 290
24 (28) Netwtw06 Driver Spams System Event Log 289
25 (31) Edit Boot Options in Windows Vista 285
26 (21) Microsoft Visual C++ 277
27 (24) TEB 270
28 (32) LDR_DATA_TABLE_ENTRY 262
28   KPRCB (i386) 262
30 (25) Kernel Versions 252
31 (29) SYSTEM_HANDLE_INFORMATION 214
32 (4) AOL Exploits Bug in Own Software (AIM) 197
33 (34) About This Site 195
34 (42) KERNELBASE Functions 194
35 (26) Boot Options: nx 189
36 (35) What’s New? 180
37 (37) The Boot Status Data Log 179
38 (47) Advanced Boot Options Menu in Windows Vista 176
39 (38) HAL Versions 175
40 (65) The First Run Page in Internet Explorer 173
40 (48) The API Set Schema 173
42 (41) SYSTEM_HANDLE_TABLE_ENTRY_INFO 171
43 (44) Internet Explorer 170
44 (33) SHELL32 Functions 169
45 (44) BCD Objects 167
46 (46) Boot Options: detecthal 165
46 (51) NTDLL Versions 165
48 (52) KERNEL32 Versions 156
49 (53) KPCR 147
50 (54) PEB_LDR_DATA 145
51 (56) The Microsoft Visual C++ Linker 136
51 (50) SVCHOST 136
53 (56) THREADINFOCLASS 135
54 (77) Disable Global Hot Keys 131
55 (49) RtlInitUnicodeString 129
56 (60) KTHREAD 125
56   Windows Studies 125
58   ETHREAD 124
58 (82) KPROCESS 124
60 (55) Consultation 121
60 (74) KPRCB (amd64) 121
62 (43) The Service Control Manager Event Provider 120
63   RTL_PROCESS_MODULE_INFORMATION 115
64 (40) Licensed Driver Signing in Windows 10 114
65   SYSENTER and SYSEXIT in Windows 113
66 (76) THREADINFO 112
66 (67) SYSTEM_THREAD_INFORMATION 112
68 (72) Boot Options: numproc 111
69 (58) Feedback 110
70 (79) The CPUID Instruction 106
71 (39) NtTraceControl 105
72 (71) Software Analysis by Reverse Engineering 103