The system calls a WH_SHELL hook procedure when the shell application is about to be activated and when a top-level window is created or destroyed.

• 当加壳程序即将被激活时、当处在最顶层的窗口被创建或者销毁时，系统会调用WH_SHELL钩子子程。