<p>I'm actually madbro. Turns out the binary is built for an imaginary architecture built by them. Missed a hint, there's some stego in the original image. I found the last page through a complete fluke. Its "/soyoudidit.asp". Not happy until I've run this through their "architecture" though. </p>
<div class="gmail_quote">On Dec 1, 2011 2:34 PM, "Robert Ladyman" <<a href="mailto:it@file-away.co.uk">it@file-away.co.uk</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
The 00 01 00 00 and the nops give it away quite quickly, don't they.<br>
<br>
<br>
> Got as far as the raw binary for a 16 bit DOS executable. Running it<br>
> produces no output, the ASM seems to null registers using an XOR and then<br>
> do some comparisons against various states. There's also some iteration<br>
> against the stack pointer, which seems to move the stack frame by 65036<br>
> every iteration. Strange, but I'm getting somewhere.<br>
><br>
> On Dec 1, 2011 11:23 AM, "Robert Ladyman" <<a href="mailto:it@file-away.co.uk">it@file-away.co.uk</a>> wrote:<br>
> > > <a href="http://www.bbc.co.uk/news/technology-15968878" target="_blank">http://www.bbc.co.uk/news/technology-15968878</a><br>
> ><br>
> > ...and if anyone needs a clue, they can ask me.<br>
> ><br>
> ><br>
<br>
--<br>
Robert Ladyman<br>
File-Away Limited<br>
3 Ralston Business Centre, Newtyle, Blairgowrie<br>
Perthshire PH12 8TL SCOTLAND<br>
Tel: <a href="tel:%2B44%20%280%29%201828%20898%20158" value="+441828898158">+44 (0) 1828 898 158</a><br>
Mobile: <a href="tel:%2B44%20%280%29%207732%20771%20649" value="+447732771649">+44 (0) 7732 771 649</a><br>
<a href="http://www.file-away.co.uk" target="_blank">http://www.file-away.co.uk</a><br>
<br>
============================================<br>
Registered Office: 32 Church Street, Newtyle, Blairgowrie<br>
Perthshire, PH12 8TZ SCOTLAND<br>
Registered in Scotland, Company Number SC222086<br>
<br>
<br>
_______________________________________________<br>
dundee GNU/Linux Users Group mailing list<br>
<a href="mailto:dundee@mailman.lug.org.uk">dundee@mailman.lug.org.uk</a> <a href="http://dundeelug.org.uk" target="_blank">http://dundeelug.org.uk</a><br>
<a href="https://mailman.lug.org.uk/mailman/listinfo/dundee" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/dundee</a><br>
Chat on IRC, #tlug on <a href="http://irc.lug.org.uk" target="_blank">irc.lug.org.uk</a><br>
</blockquote></div>