!dh nt
1000 [ 26C] address [size] of Import Address Table Directory
kd> dds 83007000+1000 L583008000 854804bc PSHED!PshedEnableErrorSource83008004 85480476 PSHED!PshedSetErrorSourceInfo83008008 854804f6 PSHED!PshedDisableErrorSource8300800c 85480544 PSHED!PshedGetInjectionCapabilities83008010 8548057c PSHED!PshedInjectError
是的,其实XP和Win7都一样,你前面看的是导入目录(是_IMAGE_IMPORT_DESCRIPTOR结构),不是IAT