VxDCall Monitor (Windows 9x) logs calls to KERNEL32.1.
Logged are calls from user space made after installing VxDCall Monitor by newly
created processes only.
