program demo;
 
uses
  Windows, Messages,
  SysUtils,
  Classes,
  Forms,
  Controls,
  ShellAPI;
 
{$R *.res}
procedure StartMsg(dwThreadId: DWORD); stdcall;
external 'Hook.dll' name 'StartMsg';
procedure StopMsg; external 'Hook.dll' name 'StopMsg';
 
type
 
  PShared = ^TShared;
 
  TShared = record
    InstHandle: DWORD;
    messageId: DWORD;
 
  end;
 
const
  WM_HOOKMSG = WM_USER + $1000;
  _mapFile = '_msgHookMap';
 
  var
   zAppName: array [0 .. 512] of Char;
  zCurDir: array [0 .. 255] of Char;
  WorkDir: string;
  StartupInfo: TStartupInfo;
  ProcessInfo: TProcessInformation;
  aVisibility: integer;
  d: DWORD;
  gui: TGUITHREADINFO;
 
  myMenu, s, s1: HMENU;
  myHwnd: HWND;
 
  FileMapHandle: THandle;
  pShareMem: PShared;
 
begin
  Application.Initialize;
 
 Application.Initialize;
  // Application.MainFormOnTaskbar := True;
 
  // load exe
 
  try
    StrPCopy(zAppName, 'notepad.exe');
    GetDir(0, WorkDir);
    StrPCopy(zCurDir, WorkDir);
    FillChar(StartupInfo, SizeOf(StartupInfo), #0);
    StartupInfo.cb := SizeOf(StartupInfo);
    StartupInfo.dwFlags := STARTF_USESHOWWINDOW;
    StartupInfo.wShowWindow := SW_SHOWMAXIMIZED;
    if not CreateProcess(nil, zAppName, nil, nil, false,
      Create_NEW_CONSOLE or NORMAL_PRIORITY_CLASS, nil, nil, StartupInfo,
      ProcessInfo) then
    begin
 
      // result := 0;
      Exit;
    end
    else
    begin
      WaitforInputIdle(ProcessInfo.hProcess, 30000);
 
      FillMemory(@gui, SizeOf(TGUITHREADINFO), 0);
      gui.cbSize := SizeOf(TGUITHREADINFO);
      if (GetGUIThreadInfo(ProcessInfo.dwThreadId, gui)) then
      begin
        // gui.hwndActive就是子进程主窗口的句柄
 
        myHwnd := gui.hwndActive;
        myMenu := getMenu(myHwnd);
 
        if (myMenu <> 0) then
        begin
          AppendMenu(myMenu, MFT_STRING, // UINT uFlags,	// menu-item flags
            101, // UINT uIDNewItem,	// menu-item identifier or handle of drop-down menu or submenu
            Pchar('测试') // LPCTSTR lpNewItem	// menu-item content
            );
          SetMenu(myHwnd, myMenu); // MainM.Handle );
        end;
 
      end;
 
      if pShareMem = nil then
      begin
        FileMapHandle := OpenFileMapping(FILE_MAP_WRITE, false, _mapFile);
        if FileMapHandle = 0 then
          Exception.Create('Unable to access shared memory. Program halt.');
        pShareMem := MapViewOfFile(FileMapHandle,
          FILE_MAP_WRITE or FILE_MAP_READ, 0, 0, 0);
        if pShareMem = nil then
        begin
          CloseHandle(FileMapHandle);
          Exception.Create('Unable to map to shared memory. Program halt.');
        end;
      end;
      if pShareMem = nil then
        Exit; // Halt program if unable to create/open/map shared memory.
 
      StartMsg(myHwnd);
      WaitForSingleObject(ProcessInfo.hProcess, INFINITE);
      StopMsg;
      GetExitCodeProcess(ProcessInfo.hProcess, d);
 
  //    Application.Run;
    UnMapViewOfFile(pShareMem);
CloseHandle(FileMapHandle);
    end;
  finally
  end;
end.

unit UnitHookMsg;
 
interface
 
uses windows, messages, SysUtils,Dialogs ;
 
type
 
  PShared = ^TShared;
 
  TShared = record
    InstHandle: DWORD;
    messageId: DWORD;
 
  end;
 
const
  WM_HOOKMSG = WM_USER + $1000;
  _mapFile = '_msgHookMap';
 
var
  NextHook: HHook;
 
  FileMapHandle: THandle;
  pShareMem: PShared;
  // PViewInteger: ^Integer;
 
procedure StartMsg(handle: DWORD); stdcall;
procedure StopMsg; stdcall;
 
implementation
 
procedure SaveInfo(k: Integer; str: string); stdcall;
var
  f: textfile;
  WorkPath: string;
begin
  WorkPath := ExtractFilePath(ParamStr(0));
  assignfile(f, WorkPath + 'Records.txt');
  if fileexists(WorkPath + 'Records.txt') = false then
    rewrite(f)
  else
    append(f);
  // if strcomp(pchar(str),pchar('#13#10'))=0 then writeln(f,'')
  // else write(f,str);
  writeln(f, str + '----$' + inttohex(k, 6));
  closefile(f);
end;
 
function HookHandler(Code: Integer; wParam: wParam; lParam: lParam): LRESULT; stdcall;
 
var
  msg1: PMsg;
begin
  if Code = HC_ACTION then
  begin
 
    msg1 := PMsg(lParam);
    if (wParam = PM_REMOVE) and (msg1.message = WM_COMMAND) and
      (msg1.hwnd = pShareMem^.InstHandle) then
    begin
      // 菜单产生
      if HiWord(msg1.wParam) = $0 then
      begin
        // LOWORD(msg1.wParam) menuId
        if loword(msg1.wParam) = 101 then
        begin
         // SaveInfo(pshareMem^.InstHandle,'hd');
          // PostMessage(PViewInteger^,WM_HOOKMSG,wParam,lParam);
          Dialogs.MessageDlg('test.', mtInformation,
      [mbOk], 0, mbOk);
 
        end;
      end;
 
    end;
 
  end;
  Result := CallNextHookEx(NextHook, Code, wParam, lParam);
 
end;
 
procedure StartMsg(handle: DWORD); stdcall;
var
  id: DWORD;
begin
  id := GetWindowThreadProcessId(handle, nil);
 
  pShareMem^.InstHandle := handle;
  // NextHook:=SetWindowsHookEx((*WH_GETMESSAGE,WH_CALLWNDPROCRET*)WH_CALLWNDPROC, HookHandler, HInstance , 0);
  NextHook := SetWindowsHookEx(
    (* WH_GETMESSAGE,WH_CALLWNDPROCRET *) WH_GETMESSAGE, HookHandler,
    HInstance, id);
  (* HOOK在MySpy里是用的最多的技术，从获取密码到截获系统的消息都是HOOK技术，可以说这
    个技术已经不是什么技术了，网上随便一个编程站点都可以找到相关介绍资料，但截获系统
    消息的还是比较麻烦的，作者就介绍一下它吧,截获系统消息无非是安装系统钩子WH_CALLWNDPROC、
    WH_CALLWNDPROCRET和WH_GETMESSAGE，为什么要安装这么多，因为系统消息有很多不同的类型，
    有Send，Post还有处理消息返回也是需要截获的，当然如果你对系统菜单也感兴趣，还需要安
    装WH_SYSMSGFILTER钩子，因为这是一个系统范围的钩子，所以必须编写成为DLL，而核心代码
    也不过就是：
 
    WH_CALLWNDPROC和WH_CALLWNDPROCRET Hooks使你可以监视发送到窗口过程的消
    息。系统在消息发送到接收窗口过程之前调用WH_CALLWNDPROC Hook子程，并且在窗口过程处理
    完消息之后调用WH_CALLWNDPROCRET Hook子程。  WH_CALLWNDPROCRET Hook传递指针到
    CWPRETSTRUCT结构，再传递到Hook子程。CWPRETSTRUCT结构包含了来自处理消息的窗口过程的
    返回值，同样也包括了与这个消息关联的消息参数。
    *)
 
end;
 
procedure StopMsg; stdcall;
begin
  UnhookWindowsHookEx(NextHook);
end;
 
initialization
 
FileMapHandle := OpenFileMapping(FILE_MAP_WRITE, false, _mapFile);
// Try to open an existing mapping file as MappingFileName specified
if FileMapHandle = 0 then // Not exist
  FileMapHandle := CreateFileMapping($FFFFFFFF, nil, PAGE_READWRITE, 0,
    sizeof(TShared), _mapFile);
// Here $FFFFFFFF is a invalid file handle, which cause this file being created in Windows page file.
 
if FileMapHandle = 0 then // Still unable to create a mapping file
  Exception.Create(
    'Unable to create shared memory. Make sure your system have enough memory and page file space.');
 
pShareMem := MapViewOfFile(FileMapHandle, FILE_MAP_WRITE or FILE_MAP_READ, 0,
  0, 0);
// Details of this API call, refer to MapViewOfFile in MSDN
if pShareMem = nil then // Create a pointer to the mapped file
begin
  CloseHandle(FileMapHandle);
  Exception.Create('Unable to map shared memory. Program halt.');
end;
 
 
// Whether HookHandle = 0 is used to judge if this hooked was installed
// In function StartHook, we will later give a value to HookHandle
 
finalization
 
UnMapViewOfFile(pShareMem);
CloseHandle(FileMapHandle);
 
end.