#problem links in v2ex:
http://www.v2ex.com/t/142338#reply8
defaults write com.apple.DiskUtility DUDebugMenuEnabled 1
diskutil list
then we can see which is recovery disk:
/dev/disk0
#: TYPE NAME SIZE IDENTIFIER
0: GUID_partition_scheme GB disk0
1: EFI EFI MB disk0s1
2: Apple_HFS disk GB disk0s2
3: Apple_Boot Recovery HD MB disk0s3
diskutil mount "Recovery HD"
note there is a blank between "Recovery" and "HD",also,you can usd \ to replace :
diskutil mount Recovey\ HD
open /Volumes/Recovery\ HD/com.apple.recovery.boot/BaseSystem.dmg
sudo cp /Volumes/OS X Base System/bin/ls /bin/ls