I advise against the use of Graeme's modified OnGuard. Greame modified the TCode record (added "InvalidCount" field) and now exceeds 8 bytes, so the last two bytes are not protected (you can specify any value of the last 2 bytes and will be accepted as valid).