NTVDM

where can i find a reference for NTVDM.exe and especially all its switches?

man NTVDM

>>2 not funny

NTVDM is a sort of native(uses native apis) CLI(yet, it displays a console window) appication. It's used to run the Virtual DOS machine, so basically emulating legacy DOS applications ( non-PE ). It's unusual to run it from the commandline, but possible. For tweaking settings check the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WOW key, and especially the wowcmdline value. For the listing of documented switches, see: http://support.microsoft.com/kb/102986

Defines the commmand line that runs when an MS-DOS-based  application runs
under Windows NT. This command line continues to run until the related
application is closed. The following switches can be included:

   Switch   Meaning
   ----------------
   -a       Specifies a command to pass to the VDM
   -f       Specifies the directory to find NTVDM.EXE
   -m       Hides the VDM console window
   -w       Specifies the WOW VDN

Default: %SystemRoot%\system32\ntvdm -f%SystemRoot%\system32 -a

>>3
Why?

s/appication/application

>>4
Thank you. What is the -i switch doing?
I see it as -i1 and -i12.

>>7
Yes, it seems that -i1 is passed too, but it seems to be an undocumented switch. Checking quickly with a disassembler shows that there's 2 undocumented switches -i and -o, the default seems to be -i0, so when -i1 is passed, a flag is being set. In the event the value is 0 and -w is passed it will call ShowStartGlass(20000), whatever that is, there's another possible option -s, which will set a flag called fSeparateWow. I can't find out more without getting getting a pdb from MS, but I'm too lazy to download the symbols.

HAXUS THE GREAT

HAXUS THE GREAT

HAXUS THE GREAT

HAXUS THE GREAT

HAXUS THE GREAT

>>8
Wow!

>>14
World of Warcraft!