I'm perhaps totally wrong, I probably understand even less of it then you do, you are the one who cracked that thingie

But could you redirect the calls and movs (or whatever to these hardcoded adresses outside the main module are referenced by) to an added section inside the module ?
You could attach an empty section and give ActiveMark the protected memory it needs.