you might want to do a quick disassembly of the binary to see what's at 0x100000. The 256 is (to me) kind of odd. So what's the start of that image look like? Sorry, I'm rusty on lguest (i.e. I'm not Rusty) so I'm not going to be as useful. But I would be curious to see the disassembly. ron