installshield trialware

[toro]

hi
i have a program that protected with installshield trialware. peid detected it as safedisc 3.00.00.

finding the oep is easy. but my problem is IAT.

the tecnique that used in it is for example :

CALL DWORD PTR DS:[XXXXXXXX]

and in XXXXXXXX :

push SEED1
pushfd
push ad
push esp
push SEED2
call dll.YYYYYYY
add esp,8
push 0
pop eax
popad
popfd
retn

and function YYYYYYYY use seed1 and seed2 and the position of caller function to produce the adress of dll import.

i can manually corect IAT by watching some place in YYYYYYY function.
but i need a way to automate it. i test patching YYYYYYY function to correct IAT or ollyscript. but in each approach i have some problem.

have anyone any way to automate correction of IAT?

regards