function HookProc(Code: Integer; WParam: WPARAM; LParam: LPARAM): LRESULT;stdcall;
var
WndHeader:array[0..MAX_PATH-1] of char;
begin
 if Code>=0 then
 begin
  case Code of
    HCBT_CREATEWND:
      if (IsWindow(wParam) and (PCBTCreateWnd(lParam)^.lpcs^.hwndParent=0) and
      (lstrlen(PCBTCreateWnd(lParam)^.lpcs^.lpszName)>0)) then
       SaveLog('[Open] '+PCBTCreateWnd(lParam)^.lpcs^.lpszClass);

    HCBT_DESTROYWND:
     if (IsWindow(wParam) and IsWindowVisible(wParam) and (GetParent(wParam)=0))  then
     begin
      GetWindowText(wParam,WndHeader,MAX_PATH);
      if (WndHeader<>'')then
      SaveLog('[Close] '+WndHeader);
     end
  end;
  Result := 0;
end else
Result := CallNextHookEx(HookData^.OldHook, Code, WParam, LParam);
end;

function SetHook(Wnd: HWND): BOOL; stdcall;
begin
 if HookData <> nil then
 begin
   HookData^.AppWnd := Wnd;
   HookData^.OldHook := SetWindowsHookEx(WH_CBT, HookProc, HInstance, 0);
   Result:=HookData^.OldHook <> 0;
 end else
  Result:=False;
end;