spy windows ce API calls