Import Rebuilding Without Import Table

The programs that use some APIs, have import table that points to the name & module of needed APIs .
At the runtime, the loader (Operating system) loads appropriate modules (such as Kernel32, User32 & GUI32) and fills the entries of this table with the current address of APIs in the memory.

In the packed or encrypted programs, the unpacker routine that runs at the start of the program, performs this operation. This routine first loads the module with LoadLibray() API and then finds the address of desired APIs by calling GetProcAddress().

If you can not remove this unpacking routine, you should use other hooking techniques such as DLL injection.

@hajir:
I think "Kerlingen" knows about what you write since he says that he has patched the imports to point directly to the API.
As far as I understand him, he has this kind of code:

(...)
call     some_label     ; E8 call, not FF15 call
(...)
some_label:
jmp     dllname!exportname     ; "E9" relative jump

So his problem is that normally there is a call or jump to an address of the import table but here it isn't and he doesn't find the IAT in merory or there is even no IAT, so he has no table of entries like you called it.

@kerlingen:
Have you tried to find code like this

mov     esi, [offset iat+somevalue]
call    esi

;or

jmp     dword ptr [xxxxxxxx]     ; FF25 jump

If your code is written in high-level language (which I think nearly all games are) you should find my code somewhere.