http://bugs.winehq.org/show_bug.cgi?id=9672
--- Comment #15 from Robert Wm Ruedisueli esd45@earthlink.net 2010-03-12 21:27:49 --- Yes I have encounterd this with the regular executable.
I suspected that it is possible that Wine is not properly implementing some of the page permission changes being done in the copy protection.
I did notice some access control subsystems in the last log I reviewed. However, I'm not sure if it is file writing or memory writing that's being changed.
I should check that the bug exists still on newer versions, as well.
Copy protection systems have been known to do some pretty weird stuff in order to alter their own code after load as a means to reduce the ability to hack the binaries.