ive been looking around ntoskrnl.exe file, and ive found a bug.

import table is inside discardable seciton (INIT).
is t supposed to be this way?

afaik discardable section is freed after image is loaded into memory, so any later access to iat will result in page fault.

Check if the POINTERS to functions are actually located there too. You'll probably find that only the function names are in the INIT section.

You may want to see http://board.flatassembler.net/topic.php?t=10989 , something near to this was discussed.

yes ur right, their are in another section.

but its not writeable, i guess it doesnt matter.