# od -t x1 -A d vmlinuz-2.6.17 | grep "1f 8b 08 00"
0036864 84 9d 29 00 00 80 0b 00 f6 a8 18 00 1f 8b 08 00
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~1f 8b 08开始的地址为36864+12=36876
# dd if=vmlinuz-2.6.17 bs=1 skip=36876 | zcat > vmlinux
1616118+0 records in
1616118+0 records out
阅读(969) | 评论(0) | 转发(0) |
