Int 2C Fn 0028 P - Cloaking - Get Esp0 From Tss [m]

AX = 0028h

Return: CF clear
EAX = TSS's ESP0

Note: this function was first introduced with RM386 (RAM-MAN/386) v6.00, the
memory manager included in Helix Software's Netroom