Copyright: ® N T Almond - 1995
Citation: Freeware No registration fee required.


Contents

About SysSpy

Creating a SnapShot

Dumping Lists to a File

Loading a Module

Refreshing Task and Module Lists

Reloading Last Unloaded Task or Module

Showing Module Usage

Setting a Filter

Setting Window to Always on Top

Unloading a Task or Module

Disclaimer Notice

This product is offered on an "as-is" basis. The author makes absolutely no claim that it will work as described or even work at all. The author disclaims all responsibility for damages caused by the failure of this product. Your usage of this product indicates your willingness to accept complete responsibility for its use.


 About SysSpy

SysSpy was written using Visual C++ and the Microsoft Foundation Classes.

If you find this utility useful or have any ideas on how to impove this utility, you can email on Norman_Almond@Europe.notes.pw.com

Or mail me at:-

3 Baker Street

Heywood

Lancashire

OL10 2HJ

Special thanks to Liam Corner for helping me for helping me with the finer aspects of this program.

Also thanks to Michael Fitzgerald for testing SysSpy to its limits.

Back To Contents


Creating a Snapshot

The snapshot facility is used for displaying resources used when a particular module is loaded.

To use the snap shot facilty select the Snapshot option from the Options menu, this will enable the snapshot option. Load you application from the desktop or from the File menu using the Load option. Once the application is loaded select the Snapshot Option again, a dialog box will be displayed.

Example:


Dumping Contents of List to File

To dump a list of the current Tasks and Modules. Select the File option from the menu,

then select the Dump to File option. The file will be saved in a text format.

Here is an example of a saved file:

Name      Task Parent Events Instance Version          Path

FLASH     39E6 1AB6   0001   325E                      C:\WINWORD\FLASH.EXE

MMTASK    1B7E 1FF6   0000   1B56     4.0.0.329        C:\WINDOWS\SYSTEM\mmtask.tsk

Mprexe    1D1E 0000   0000   1D1E     4.0.0.330        C:\WINDOWS\SYSTEM\MPREXE.EXE

Rundll32  0F6E 0000   0000   0F6E     4.0.0.330        C:\WINDOWS\RUNDLL32.EXE

SNAGIT    35FE 1AB6   0002   336E                      C:\UTILS\SNAGIT\SNAGIT.EXE

SYSSPY    0D76 1AB6   0000   3C36                      C:\SOURCE\SYSSPY\SYSSPY.EXE

WINWORD   3B8E 1AB6   0001   26A6     6.0.0.2513       C:\WINWORD\WINWORD.EXE

Name      Module Usage   Version          Path

COMM      02EF   0059    4.0.0.330        C:\WINDOWS\SYSTEM\comm.drv

COMMCTRL  1D9F   0010    4.0.0.330        C:\WINDOWS\SYSTEM\COMMCTRL.DLL

COMMDLG   3257   0003    4.0.0.330        C:\WINDOWS\SYSTEM\COMMDLG.DLL

COURE     16D7   0001    4.0.0.330        C:\WINDOWS\fonts\coure.fon

DDEML     16FF   0058    4.0.0.330        C:\WINDOWS\SYSTEM\DDEML.DLL

DIALOG    3867   0001                     C:\WINWORD\DIALOG.FON

DISPLAY   01E7   0002    4.0.0.330        C:\WINDOWS\SYSTEM\tseng.drv

FONTS     1847   0001    4.0.0.330        C:\WINDOWS\fonts\vgasys.fon

GDI       033F   0063    4.0.0.347        C:\WINDOWS\SYSTEM\gdi.exe

KERNEL    010F   0075    4.0.0.347        C:\WINDOWS\SYSTEM\KRNL386.EXE

KEYBOARD  0167   0059    4.0.0.330        C:\WINDOWS\SYSTEM\keyboard.drv

LZEXPAND  1F4F   0005    3.11.0.300       C:\WINDOWS\SYSBCKUP\LZEXPAND.DLL

MAPI      34FF   0001    4.0.0.0          C:\WINDOWS\SYSTEM\mapi.dll

MMSYSTEM  1F57   0013    4.0.0.329        C:\WINDOWS\SYSTEM\mmsystem.dll

MOUSE     01CF   0059    9.1.0.0          C:\WINDOWS\SYSTEM\mouse.drv

MSOPL     1CAF   0001    4.0.0.329        C:\WINDOWS\SYSTEM\msopl.drv

MSSBLST   1C7F   0002    4.0.0.329        C:\WINDOWS\SYSTEM\mssblst.drv

OEMFONTS  183F   0001    4.0.0.330        C:\WINDOWS\fonts\vgaoem.fon

SDM       2387   0001    3.0.0.2323       C:\WINDOWS\SYSTEM\SDM.DLL

SERIFE    1437   0001    4.0.0.330        C:\WINDOWS\fonts\serife.fon

SHELL     1E9F   0008    4.0.0.330        C:\WINDOWS\SYSTEM\SHELL.DLL

SMALLE    16C7   0001    4.0.0.330        C:\WINDOWS\fonts\smalle.fon

SOUND     023F   0001    4.0.0.330        C:\WINDOWS\SYSTEM\mmsound.drv

SSERIFE   151F   0001    4.0.0.330        C:\WINDOWS\fonts\sserife.fon

SYMBOLE   16CF   0001    4.0.0.330        C:\WINDOWS\fonts\symbole.fon

SYSTEM    01C7   0059    4.0.0.330        C:\WINDOWS\SYSTEM\system.drv

TOOLHELP  3047   0003    4.0.0.330        C:\WINDOWS\SYSTEM\TOOLHELP.DLL

USER      1817   0058    4.0.0.347        C:\WINDOWS\SYSTEM\user.exe

VER       1EBF   0004    4.0.0.330        C:\WINDOWS\SYSBCKUP\VER.DLL

WIN87EM   2A3F   0005                     C:\WINDOWS\SYSTEM\WIN87EM.DLL


Loading a Module

To load a module from SysSpy. Select the File Menu the select the Load... option.

 A dialog box will appear allowing various types of modules to be loaded.


Refreshing Task and Module Lists

To refresh both Task and Module lists, select the Options menu

then select Refresh or press F5.

You can also refresh just the Task or Module lists by clicking on

 the right mouse button over the relevent list, then choose the Refresh option.


Reloading a Task or Module

Once a Task or Module has been unloaded using SysSpy, you can reload it by selecting

the Options menu and choosing the Reload Last option, or press Ctrl and Z.


Showing Module Usage

To show which Tasks and Modules are being used by a Module, select the module from the Module list, then select Options menu and choose the Show Usage option. This can also be done by clicking the right mouse button whist over the Module list.

Here is an example of showing usage on mdoule USER.


Select a Filter
Selecting a Filter

You can select a filter for the module list by selecting the Filter menu choosing one of the filters.

Filters allow you to view just specific file types ie:

DRV	Drivers

EXE	Executables

DLL	Dynamic Link Librabries

FOT/FON	Fonts

CPL	Control Panel Applets

SCR	Screen Savers

You can restore the default view by select All from the menu.


Setting Always on Top
Setting Window Always on Top

This feature is useful when monitoring Tasks and Modules loading and unloading. To select and unselect this option, select the File menu and choose the Always on Top option.


Unloading a Task or Module

There are three methods to unload a Task or Module:

1.	Double click on the select Task or Module.

2.	Select a Task or Module the click the right mouse button and select the Unload... option.

3.	Select a Task or Module the select then Options menu and choose the Unload Task

or Module option.

Warning:

Some Tasks and Modules rely on one another, and unloading a particular Task or Module could adversly affect the stability of Windows, and could possibly result in a system crash.