INT 2C P - Cloaking v1.01 - "Query_Current_VM" AX = 0012h Return: CF clear EBX = handle of active VMsee Virtual Machine ESI = handle of system VMsee Virtual Machine ECX = VMsee Virtual Machine status flags (see #02562) EDX = shell flags (see #02563) Note: this function is only available while MS Windows is running in enhanced mode SeeAlso: AX=000Fh,AX=0011h,AX=0013h Bitfields for VMsee Virtual Machine status flags: Bit(s) Description (Table 02562) 0 in exclusive mode 1 runs in background 2 being created 3 suspended 4 not executable 5 executing in protected mode 6 contains PM application 7 32-bit PM application 8 called from VxDA virtual device driver for Windows 3.x or 95. So called because nearly all of the Windows 3.0 drivers had names of the form "VdeviceD". See also device driver. 9 high priority background 10 blocked on semaphore 11 awakening 12 has pageable V86see Virtual-86 Mode 13 has locked V86see Virtual-86 Mode 14 is scheduled 15 idle 16 closing Bitfields for shell flags: Bit(s) Description (Table 02563) 2 windowed 5 Alt-Tab reserved 6 Alt-Esc reserved 7 Alt-Space reserved 8 Alt-PrtSc reserved 9 Alt-Enter reserved 10 Alt-PrtSc reserved 11 PrtSc reserved 12 polling enabled 13 no HMAsee High Memory Area 14 has shortcut key 15 locked EMSsee Expanded Memory Specification handles 16 locked XMSsee Extended Memory Specification handles 17 fast paste enabled 18 locked V86see Virtual-86 Mode memory 30 close-on-exit enabled