컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 賽賽賽賽� 賽賽賽賽� 賽 賽 賽賽賽賽� 賽賽賽賽� 賽賽賽賽� 賽� 賽 賽� 賽賽賽賽� 賽賽 賽賽賽 賽� 賽賽賽 賽� 賽 賽� � 賽� 賽賽� 賽� 賽賽賽 賽賽賽賽� 賽賽賽賽� 賽� 賽� 賽賽賽賽� 賽賽賽賽� 賽賽賽賽� Computer Security Engineering Belgrade, Yugoslavia Blagoje Ceklic Tel/Fax: +381-11/532-2345 e-mail: comsec@beotel.yu http://www.beotel.yu/~comsec/ 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� PC Guard V3.05 PRO Professional Software Protection System Copyright (c) 1994/97 by Blagoje Ceklic all rights reserved COMSEC - Computer Security Engineering Software Protection & Data Security Author: Blagoje Ceklic * * * User's Guide * * * rev: 3.00 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 This document contains proprietary information which is protected by copyright. No part of this document may be photocopied, reproduced, or translated without the prior written consent of author. The information in this document is subject to change without notice. Trademarks of companies mentioned in this documentation appear for identification purposes only and are the property of their respective companies. License agreement 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Carefully read the following terms and conditions. Use of this product constitutes your acceptance of these terms and conditions and your agreement to abide by them. PC Guard is a commercial product. Each individual user, company, agency or institution that uses this program have to pay the license, one per each computer on which the program is used. No one is allowed to add, change or reverse engineer anything in the PC Guard package as received. Important: every protected program will have both PC Guard username and serial number embedded in it. Demo version only: You may use DEMO version of PC Guard for evaluation purposes for 30 days. No files protected with PC Guard during this period may be distributed to other users, commercially or non-commercially. After this evaluation period you must either pay for a licensed copy of PC Guard or stop using DEMO version. Sysops, user groups, disk vendors, CD-ROM vendors and other similar organizations may distribute DEMO version of PC Guard provided that no files are excluded from the distribution and that no more than $10 (except for CD-ROM) is charged for distribution. Disclaimer 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Blagoje Ceklic does not warrant that this software will meet your requirements or that the operation of the software will be uninterrupted or error free. The warranty does not cover any media or documentation which has been subjected to damage or abuse by you or others. The software warranty does not cover any copy of the licensed software which has been altered or changed in any way. ANY IMPLIED WARRANTIES INCLUDING ANY WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE ARE LIMITED TO THE TERM OF THE EXPRESS WARRANTIES. Some States do not allow limitations on how long an implied warranty lasts, so the above limitation may not apply to you. The warranties set forth above are in lieu of any and all other express or implied warranties, whether oral, written, or implied, and the remedies set forth above are the sole and exclusive remedies. Blagoje Ceklic is not responsible for any problems or damage caused by this software that may result from using this software. This includes, but is not limited to, computer hardware, computer software, operating systems, and any computer or computing accessories. End user agrees to hold Blagoje Ceklic harmless for any problems arising from the use of the software. Blagoje Ceklic SHALL NOT IN ANY CASE BE LIABLE FOR ANY SPECIAL, INCIDENTAL, CONSEQUENTIAL, INDIRECT OR OTHER SIMILAR DAMAGES ARISING FROM ANY BREACH OF THESE WARRANTIES EVEN IF Blagoje Ceklic OR HIS AGENTS OR DISTRIBUTORS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Some states do not allow the exclusion or limitation of incidental or consequential damages, so the above limitation or exclusion may not apply to you. In no case shall Blagoje Ceklic's liability exceed the license fees paid for the right to use this software. 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Contents: <1> Introduction 1.1 What is PC Guard? 1.2 List of included files 1.3 Software & Hardware requirements <2> Executable file protection 2.1 Protection methods 2.2 Protection modes 2.3 Demo modes 2.4 How to protect program with... 2.4.1 ENVELOPE/LOADER method 2.4.2 CODE mode 2.4.3 AUTO mode 2.4.4 NOIC mode 2.5 How to make protected demo version of your program... 2.6 Executable file protection report 2.7 Control panel 2.8 Executable file protection options SET PATH option SET FILENAME option SET TYPE option SET MODE option CLIENT option SET DEMO MODE option SET TIME LIMIT option SET DATE LIMIT option SET EXEC LIMIT option LAYERS COUNT option SET CODE option PROTECT EXE option <3> Installation disks protection 3.1 Protection modes 3.2 How to make protected installation disks for your software... 3.3 Installation disks protection report 3.4 Installation program (ATINST) 3.5 Installation disks protection options SET PATH option SET MODE option SET FLOPPY option CLIENT option SET DIRECTORY option PROGRAM INFO option INSTALL COUNT option SET CODE option INSTALL DISK option <4> Configuration setup 4.1 Configuration setup options 4.1.1 Executable file protection Show 'Licensed to' message Beep on Entry Wait on Entry Check for debugger Check file position Default info file 4.1.2 ENVELOPE protection method Show progress indicator Default layers count 4.1.3 LOADER protection method Encrypt whole image Destroy file header Erase file from memory Default loader name 4.1.4 User configuration Auto mode warning Demo mode warning Identification check warning Layers count warning New Exe file warning File compression warning Overlay file warning 'Already protected' warning Com/Exe conversion warning Installation count warning 'Diskette is not empty' warning Default info file <5> Computer identification program (GUARDID) <6> COM to EXE file conversion program (COM2EXE) <7> File encryption utility (HIDEIT) <8> Contact address 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 <1> Introduction 1.1 What is PC Guard? 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 PC Guard is a professional software protection system. PC Guard is completely written in assembly language. With PC Guard you can easily protect any Dos EXE file and create protected installation disks for your software. Even more, you don't need any programming experience for this. Everything is fully automatic! With PC Guard you can protect unlimited number of your programs with no additional investments. You also don't need any additional hardware (hardware keys, dongles etc.) for proper execution of protected programs. PC Guard is based only on complex software protection techniques and PC hardware details. Author would like to thank to all the good people who helped in creating and testing the PC Guard. Without them PC Guard wouldn't be what it's today... 1.2 List of included files (licensed version) 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 컴컴컴 Executable files 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 GUARD.EXE - Main application ATINST.EXE - Installation program (protected disks -> hard drive) GUARDID.EXE - Computer identification program COM2EXE.EXE - COM to EXE conversion program HIDEIT.EXE - Encryption utility 컴컴컴 Source files 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 IDESN.ASM - IDE hard disk serial number reader 컴컴컴 Txt files 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� PCGUARD.DOC - User's Guide (this file) README.TXT - Instructions for the first installation of PC Guard 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 1.3 Software & Hardware requirements 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Software and hardware requirements for running PC Guard are: - IBM XT, IBM PS/2 or IBM AT compatible computer - Mono, CGA, EGA, VGA or SVGA video system - MS Dos 3.0+ - 200kb of free conventional memory - 500kb of free hard drive space 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 2. Executable file protection 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 With main application (GUARD.EXE) you can protect any Dos EXE file. If you want to protect Dos COM file use conversion program COM2EXE and convert it to EXE file. If you want, you can compress executable file before starting protection process with any of the known executable file compressors like PkLite, LzExe, Diet etc. 2.1 Protection methods 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 There are two main methods (types) of executable file protection: - Envelope - Loader If you are using envelope method PC Guard will make security envelope around your file. Security envelope consist of protection layers. Each layer have a large number of decryption routines and anti-debugging tricks that will heavily protect your file from reverse engineering. You can choose any number of protection layers. Protected file will be fully encrypted with each protection layer. Loader method can be used with any kind of executable files but it's main purpose is for protection of executable files that have big internal overlays. If you select loader method PC Guard will encrypt executable file and create special program that must be used for executing of the protected executable file. Protected executable file can't be started without this loader program. Loader program is heavily protected against any kind of reverse engineering. Both methods can be combined with each other. You can protect file using envelope method and after that with loader method. 2.2 Protection modes 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 There are three protection modes: - NOIC - AUTO - CODE If your program is protected with NOIC mode than it will work on any computer. Program protected with AUTO mode will work only on a computer where it has been executed for the first time. After the first execution protected program will 'grab' a signature from the computer's motherboard (BIOS checksum) and protected program will be 'linked' with that motherboard. Signature is the 32-bit number and it can be obtained from any motherboard with GUARDID utility. For the best security use CODE mode. You have to obtain identification number (bios signature) of a computer where you want to install your program. This code will be used for the encryption of your program and it will not be built into protected file. When executed, protected program will get current computer signature and decrypt protected program without any validation of the signature. If the program is executed on the wrong computer it will not work. Among other things, PC Guard can link protected program with it's disk position so it can't be moved around! 2.3 Demo modes 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 With PC Guard you can also easily create demo versions of your programs. There are three demo limitations that can be used: - TIME Protected program runs only a limited period of time every time it's executed. - DATE Protected program can be used only for a limited period of time. - EXEC Protected program can be executed only for a limited number of times. These demo limitations can be used with any of the protection methods and protection modes mentioned before. Demo limitation can be also combined with each other. 2.4 How to protect program with... 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 For your easier understanding of protection process look at the following diagram: Protection steps: Available options: 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 旼컴컴컴컴컴컴컴컴커 Show 'licensed to' message Executable file � EXE FILE � Beep on entry 읓컴컴컴컴컴컴컴쩡켸 Wait on entry � � Check for debugger � � Check file position 旼컴컴컨컴컴커 憫컴컴컴컴커 Protection � ENVELOPE � � LOADER � Set TYPE method 읕쩡컴컴컫컫켸 읓컫컴컴컴쬔 Encrypt whole image � � � � � � Destroy file header � � � � � � Erase file from memory � � � � � � Info filename � � 읕컴컴컴컴캐컴컴커 � Show progress indicator � 旼컴컴컴컴컴컴켸 � � � Protection layers count � � 읕컴컴� 旼컴켸 � � Default info file � � � � � � 旼컨컴컴좆 旼좔컴좔커 憫컴좔컴커 Protection � CODE � � AUTO � � NOIC � Set MODE mode 읕쩡컴컴켸 읕컴쩡컴켸 읕컴컴컫켸 Set CODE 읕컴컴컴컴컴컴컴탠컴컴컴컴컴컴컴켸 旼컴컴컴커 旼컴좔컴커 旼컴컴컴커 Demo modes � EXEC 쳐컴컴컴캑 DATE 쳐컴컴컴컴캑 TIME � Set EXEC limit 읕컴쩡컴켸 읕컴쩡컴켸 읕컴컫컴켸 Set TIME limit 읕컴컴컴� � 旼컴컴컴컴� Set DATE limit 旼좔컴컴컴컴좔컴컴컴컴컨커 Set DEMO mode Protected executable � PROTECTED EXE FILE � 읕컴컴컴컴컴컴컴컴컴컴컴켸 2.4.1 ENVELOPE/LOADER method 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 In main application: - Use option SET TYPE to set protection type to ENVELOPE or LOADER. - Use option SET MODE to set security mode. You can then set other options and start protection process. 2.4.2 CODE mode 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 For the best security use CODE mode. You have to obtain identification number (32-bit bios signature) of the computer where you want to install your program. This code will be used for the encryption of your program and it will not be built into protected file. When executed, protected program will get current computer signature and decrypt protected program without any validation of the signature. If the program is executed on the wrong computer it will not work. - Get computer identification number with GUARDID utility. You can either get it by yourself or by giving the GUARDID to your client. Start GUARDID from the command line with /B option. GUARDID.EXE /B In main application: - Use SET CODE option to enter identification number. - Use SET MODE option to set security mode to CODE. You can then set other options and start protection process. 2.4.3 AUTO mode 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Program protected with AUTO mode will work only on the computer where it is executed for the first time. After the first execution protected program will 'grab' a signature from the computer's motherboard and protected program will be 'linked' with that motherboard. In main application: - Use SET MODE option to set security mode to AUTO You can then set other options and start protection process. Be aware that end user can make backup copy before starting protected program! 2.4.4 NOIC mode 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 If your program is protected with NOIC mode than it will work on any computer! It will be protect only against reverse engineering. In main application: - Use SET MODE option to set security mode to NOIC You can then set other options and start protection process. 2.5 How to make protected demo version of your program... 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 In main application: - Use SET DEMO MODE option to set demo mode to ON - Set required demo limitations: Use SET TIME LIMIT option to set time limitation. Time limitation is expressed in minutes (1-999). Protected program will run only a selected (limited) amount of time every time it's executed. Use SET DATE LIMIT option to set date limitation. Date limitation is expressed in days (1-999). Protected program can be used only for a selected (limited) number of days. Use SET EXEC LIMIT option to set execution limitation. This limitation is expressed in number of possible executions of protected program. In other words, protected program can be executed only for a limited number of times. 2.6 Executable file protection report 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 After every successful protection process PC Guard creates report about protected program. This report includes many valuable information such as date and time of protection, full name of protected program, information about used type and method of protection etc. Default name of report file is _ENCRYPT.INF. You can change this setting in PC Guard Setup. Report file is created in the same directory as the protected program. 2.7 Control panel 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Protection process can be monitored on control panel which consist of the following elements: PROGRESS Graphic presentation of protection process advance. TOTAL Total number of protection layers. LEFT Number of protection layers left to be built into protected file. STATUS Status messages about protection process. COMPRESSOR Name of the executable file compressor if program is compressed. ERROR Error messages about protection process. FLAGS Characteristics of the program that is going to be protected. Yellow flag represent nominal value and blinking red flag shows that characteristic is not nominal. 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 � Flag � Nominal value � 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 � E � EXE file has signature (MZ or ZM) � � C � Program is compressed � � P � Program is not already protected with PC Guard� � N � Program is standard dos EXE file � � O � Program don't has internal overlays � 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 2.8 Executable file protection options 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 SET PATH option 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Default: Starting directory name Use this option to set directory name where program that is going to be protected is located. Example: C:\DEMO\MYPROG SET FILENAME option 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Default: None Use this option to set name of the program you want to protect. Example: MYPROG.EXE You can also specify program name directly from the command line: Example: C:\GUARD.EXE MYPROG.EXE SET TYPE option 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Default: ENVELOPE protection method Use this option to set protection method. You can choose between ENVELOPE and LOADER protection method. More details about protection methods you can find in chapter 2.1. SET MODE option 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Default: CODE protection mode Use this option to set protection mode. You can choose between CODE, AUTO and NOIC protection mode. More details about protection modes you can find in chapter 2.2 CLIENT option 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Default: None Use this option to enter your client's name (his full name or company name). Important: You must enter this data before starting protection process! SET DEMO MODE option 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Default: OFF Use this option to turn demo mode ON or OFF. When you set this option to OFF all demo limitation values will be set to zero. More information about demo mode you can find in chapter 2.5. SET TIME LIMIT option 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Default: 0 Scope: 1-999 minutes Use this option to set time limitation for a protected program. Protected program will run only a limited period of time every time it's executed. After selected time executed program will freeze and all opened files will be automatically closed. One minute before the end of a selected period end user will be warned with three beeps. Important: You can't use time limitation for resident programs. SET DATE LIMIT option 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Default: 0 Scope: 1-999 days Use this option to set date limitation for a protected program. Protected program will run only for a limited period of time. Be aware that protected program keep track only about date change and it doesn't check date validity. SET EXEC LIMIT option 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Default: 0 Scope: 1-999 executions Use this option to set execution limitation for a protected program. Protected program can be executed only for a selected, limited number of times. LAYERS COUNT option 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Default: 3 Scope: 1-99 layers Use this option to set number of protection layers for ENVELOPE method. You can change default value from configuration setup. SET CODE option 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Default: 00000000 Use this option to set identification number of target computer for CODE method. You can obtain this identification number (bios signature) with GUARDID utility. It will be used for the encryption of protected program and it will not be built into protected file. When executed, protected program will get current computer identification number and decrypt protected program without any validation. If you are using CODE mode you must set this number! PROTECT EXE option 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Use this option to start executable file protection process. 3. Installation disks protection 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 PC Guard allows you to easily create and protect installation disk for your software. Simply, copy all of your files into any directory, start PC Guard, specify required parameters and PC Guard will make protected installation disks for your program. All files will be encrypted including even their names and after that copied to the diskettes. Special installation program named ATINST (which is a part of the PC Guard package) will be copied to the first diskette. Only with this program protected files can be installed to hard drive from the floppy drive. Number of the installations from diskette to the hard drive can be limited also. Installation disks are not physically protected from the copying! There are many programs that can copy any diskette to another regardless of the software copy protection used. Also, it's useful to allow end user to make backup copies of software disks. All files are encrypted and thus useless for the end user if used on wrong computer. 3.1 Protection modes 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 You can choose any of the protection modes: CODE - program can be installed only on the computer with the specific identification code which is defined previously. This code can be obtained with GUARDID utility, it isn't stored on the installation disks and it's used for the encryption of the protected files. This method is the most secure. AUTO - first installation can be done on any computer but every next installation can be done only on the computer where the first installation was. NOIC - program can be installed on any computer but all files are still encrypted. 3.2 How to make protected installation disks for your software... 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 The easiest way to make protected installation disks is: - Protect all executables from your software with PC Guard. - Copy all required files to an empty directory. In main application: - Use SET PATH option to enter name of the directory where you have copied your files. - Use SET MODE option to set security mode to CODE, AUTO or NOIC - If you chose CODE security mode you must enter identification number for the client's computer. Use GUARDID utility to obtain it. This number will be used for the encryption. - Enter all the required data: a) Client's name (CLIENT option) b) Program description (PROGRAM INFO option) c) Target directory name (SET DIRECTORY option) - Set target floppy drive (SET FLOPPY option) - Set number of possible installations (INSTALL COUNT option) - Start installation process (INSTALL DISK option) 3.3 Installation disks protection report 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 After every successful protection process PC Guard creates report about protected installation disk(s). This report includes many valuable information such as date and time of protection, detailed list of copied and encrypted files, information about used security modes etc. Default name of report file is _INSTALL.INF. You can change this setting in PC Guard Setup. Report file is created in starting directory. 3.4 Installation program (ATINST) 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Installation program ATINST.EXE together with INSTALL.BAT batch file is copied to the first installation diskette. Only with this program protected files can be installed to hard drive. End user can start installation process directly by typing ATINST.EXE from the command line or with INSTALL.BAT file. Command line syntax for installation program is: ATINST.EXE [TARGET_DIRECTORY] Example: A:\ATINST.EXE D:\MYPROG Installation program can be started without parameters. In that case target directory (on default drive C:\ ) defined during creation of installation disks (in main application) will be used. If target directory doesn't exist installation program will create it automatically. Installation program checks for free disk space before starting installation process. Important: - Installation program can be started only from the floppy disk. - Installation program can be started only on computer with the proper identification number if CODE and AUTO (after first installation) modes are used. - Number of possible installations have to be greater then zero. - Information about protected files have to be available for installation program. It's stored in ATINST.DAT file which is located on the first installation diskette. This data is saved in encrypted form. - Data in ATINST.DAT file have to be correct and not damaged in any way! If there is any kind of damage installation program will not work! 3.5 Installation disks protection options 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 SET PATH option 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Default: Starting directory name Use this option to set directory name where program files are located. All files from that directory will be encrypted and copied to installation disks. Maximum number of files is 999. Example: C:\DEMO\MYPROG SET MODE option 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Default: CODE protection method Use this option to set protection mode. You can choose between CODE, AUTO and NOIC protection mode. More details about protection modes you can find in chapter 3.1. SET FLOPPY option 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Default: A floppy drive Use this option to set target floppy drive. You can choose between A and B floppy drive. CLIENT option 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Default: None Use this option to enter your client's name (his full name or company name). This information will be displayed during installation process. Important: You must enter this data before starting protection process! SET DIRECTORY option 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Default: None Use this option to set target directory where your program is going to be installed from floppy disks. Enter only directory name without '\' signs. Assumed hard drive is drive C. This directory can be changed by the end user during installation. Important: You must enter this data before starting protection process! PROGRAM INFO option 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Default: None Use this option to enter description of your program. Maximal length of program description is 30 characters Important: You must enter this data before starting protection process! INSTALL COUNT option 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Default: 0 Scope: 0-999 installations Use this option to set number of possible installations for your client. Default value is zero and it means that number of installations is unlimited. SET CODE option 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Default: 00000000 Use this option to set identification number of target computer for CODE method. You can obtain this identification number (bios signature) with GUARDID utility. It will be used for the encryption of the protected files and it will not be saved on floppy disk. If you are using CODE mode you must set this number! INSTALL DISK option 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Use this option to start installation disks protection process. 4. Configuration Setup 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Configuration setup is a part of main application. You can enter setup from the main menu (Setup button). On it's first startup PC Guard will create configuration file (in it's startup directory) called PCGUARD.CFG with default parameters. Main application (GUARD.EXE) will load and check validity of this configuration file every time it's executed. If configuration file is damaged, delete it and start PC Guard again. Option marked with (X) sign is turned ON and option marked with ( ) sign is turned OFF. Use SPACE key or left mouse button to change option status. On exit you can save configuration with F2 function key (Exit/Save option) or just leave without saving configuration with ESC key (Exit/Use option). 4.1 Configuration setup options 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 4.1.1 Executable file protection 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Option: Show 'Licensed to' message Default: ON If this option is set to ON protected program will show a license message on it's every execution. Use CLIENT option to set this message. Option: Beep on Entry Default: ON If this option is set to ON protected program will beep on it's every execution. Option: Wait on Entry Default: ON If this option is set to ON protected program will pause for a while after displaying a license message. Option: Check for debugger Default: ON If this option is set to ON protected program will check if there is a debugger activated or running in a background. If protected program detect a debugger it will freeze or reset computer. Option: Check file position Default: OFF If this option is set to ON protected program will be linked to it's disk position after first startup. If you are using date or execution limitation this option will be automatically set to ON. Option: Default info file Default: _ENCRYPT.INF Use this option to set default executable file protection report filename. 4.1.2 ENVELOPE protection method 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Option: Show progress indicator Default: OFF If this option is set to ON decryption of a protected file will be represented graphically. You can use this option if protected program is going to be used on slower machines such as PC286 or PC386 where decryption process takes a while. Option: Default layers count Default: 03 Use this option to set number of protection layers (Envelope method). 4.1.3 LOADER protection method 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Option: Encrypt whole image Default: ON If this option is set to ON whole protected file will be encrypted, including the file header. Option: Destroy file header Default: ON If this option is set to ON protected file header will be destroyed. Option: Erase file from memory Default: OFF If this option is set to ON protected program will be erased from a memory after it ends. Option: Default loader name Default: LOADMAIN Use this option to set default protected file loader. 4.1.4 User configuration 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Option: Auto mode warning Default: ON Use this option to turn OFF and ON AUTO mode warning messages. Option: Demo mode warning Default: ON Use this option to turn OFF and ON DEMO mode warning messages. Option: Identification check warning Default: ON Use this option to turn OFF and ON computer identification (NOIC mode) warning messages. Option: Layers count warning Default: ON Use this option to turn OFF and ON warning messages about number of protection layers. If this option is set to ON and you are using less than 3 layers PC Guard will warn you about this. Option: New Exe file warning Default: ON If this option is set to ON and you are trying to protect Windows 3.x (New Exe standard) executable file PC Guard will warn you. Remember: You can protect only standard dos EXE files. Option: File compression warning Default: ON If this option is set to ON and you are trying to protect executable file which is not compressed you will be warned about this. Option: Overlay file warning Default: ON If this option is set to ON and you are trying to protect executable file which contains internal overlays you will be warned about this. Option: 'Already protected' warning Default: ON If this option is set to ON and you are trying to protect executable file already protected with PC Guard you will be warned about this. Option: Com/Exe conversion warning Default: ON If this option is set to ON and you are trying to protect executable file which is previously converted from COM to EXE file you will be warned about this. Option: Installation count warning Default: ON If this option is set to ON and if number of possible installations is unlimited (installation count option is set to zero) PC Guard will warn you with appropriate message. Option: 'Diskette is not empty' warning Default: ON If this option is set to ON and installation diskette is not empty PC Guard will warn you with the appropriate message. Option: Default info file Default: _INSTALL.INF Use this option to set default installation report filename. 5. Computer identification program (GUARDID) 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 GUARDID utility can provide you with usable information about any PC computer. Command line options: /s (/S) - operation system information /i (/I) - IDE hard drive information /b (/B) - BIOS information /f (/F) FILENAME.EXE - EXE file information /o (/O) FILENAME - output report filename /! - disable screen output /? (/H) - help a) Operation system information Example: 컴컴컴� System 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Base memory size: 640 Kb Expansion memory size: 03072 Kb Installed Dos Version: MS Dos 06.00 GUARDID is running under: Windows/386 3.x Full Windows Version: MS Windows 03.10 Windows mode: Enhanced b) IDE hard drive information Example: 컴컴컴� IDE Drive 컴컴컴컴컴컴컴컴컴컴컴컴컴컴� Master IDE Ser/Num: A40EQJ6S Master IDE Model: Maxtor 7080 AT c) EXE file information Example: 컴컴컴� EXE File 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 Filename: WINHELP.EXE EXE type: Windows 3.0+ 16-bit NE (New Executable) file. Header length: 512 bytes. Dos file size: 256192 bytes. File size: 13433 bytes. Overlay size: 242759 bytes. Minimum memory required: 0000 Maximum memory required: FFFF SS:SP pointer: 01CB:0800 CS:IP pointer: 0000:01E6 Relocation items number: 0005 Relocation table offset: 0040 Overlay number: 0000 d) BIOS information Example: 컴컴컴� BIOS 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 BIOS Copyright: (F000:0070) (C)1985-1992,AMI American Megatrends BIOS Manufacturer: (F000:3844) American Megatrends Inc. BIOS Date: (FFFF:0005) 11/11/92 BIOS Version: (F000:8150) Version 2.2 Identification code: 67834523 GUARDID can exactly identify following BIOS manufacturers: AMI (American Megantrends Inc.) Award (Award Software Inc.) Phoenix (Phoenix Technologies Ltd.) All information is written to GUARDID.DAT file for later use. GUARDID utility can be started on any computer. 6. COM to EXE file conversion program (COM2EXE) 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 With PC Guard you can protect only standard Dos EXE executable files. COM2EXE utility allows you to convert any Dos COM file to EXE file. Command line syntax: COM2EXE.EXE FILENAME.COM 7. File encryption utility (HIDEIT) 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 HIDEIT utility allows you to encrypt and decrypt any file on your computer. Command line options: /H /? - Help /C - Encrypt file /D - Decrypt file /B - Automatic encryption/decryption (BIOS) /K KEY - Encryption/decryption key /I FILENAME - Input filename /O FILENAME - Output filename If you are using /B option file will be encrypted/decrypted automatically with motherboard BIOS signature. In this case no encryption key is required. Examples: 1) C:\HIDEIT.EXE /K DemoKey /I DEMO.TXT /O DEMO.ENC File "DEMO.TXT" will be encrypted with "DemoKey" key and the result will be written to "DEMO.ENC" file. 2) C:\HIDEIT.EXE /K DemoKey /I DEMO.ENC /O DEMO.DEC /D File "DEMO.CRY" will be decrypted with "DemoKey" key and the result will be written to "DEMO.DEC" file. 3) C:\HIDEIT.EXE /B /I DEMO.TXT /O DEMO.ENC File "DEMO.TXT" will be encrypted with motherboard BIOS signature and the result will be written to "DEMO.ENC" file. File "DEMO.ENC" can than be decrypted only on the same computer with the following command: 4) C:\HIDEIT.EXE /B /I DEMO.ENC /O DEMO.DEC /D 10. Contact address 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 賽賽賽賽� 賽賽賽賽� 賽 賽 賽賽賽賽� 賽賽賽賽� 賽賽賽賽� 賽� 賽 賽� 賽賽賽賽� 賽賽 賽賽賽 賽� 賽賽賽 賽� 賽 賽� � 賽� 賽賽� 賽� 賽賽賽 賽賽賽賽� 賽賽賽賽� 賽� 賽� 賽賽賽賽� 賽賽賽賽� 賽賽賽賽� Blagoje Ceklic Partizanska 4/17 11000 Belgrade, Yugoslavia, Europe Phone/Fax: +381-11/532-2345 e-mail: comsec@beotel.yu http://www.beotel.yu/~comsec/ 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴