3.11 Detecting DKRNL32

  To detect that DKRNL32.DLL is running a program may use Win32 API
  GetVersionExA. DKRNL32 will return 2222 in low word of 
  OSVERSIONINFO.dwBuildNumber - this is the same as Windows 98 SE - and 
  OSVERSIONINFO.szCSDVersion[0] will be 0.
  Since version 2.8.28 one can detect DKRNL32 by calling GetProcAddress
  with string "GetDKrnl32Version". If this call returns with EAX != 0,
  DKRNL32 is installed, and calling this address will return the current
  DKRNL32 version, the major version no in AL, the minor version no in AH 
  and any subminor version no in HIWORD(EAX).    

ACP, thanks very much.