This example shows use of Windows 9x global hooks (HOOK_HARD attribute). VxDCall Monitor (Windows 9x) logs calls to KERNEL32.1. Logged are calls from user space made after installing VxDCall Monitor by newly created processes only.