https://bugs.winehq.org/show_bug.cgi?id=49052
--- Comment #5 from Fabian Maurer dark.shadow4@web.de --- @Anastasius, @Paul Thanks for your comments. I'm not sure what it does, but to be it seems pretty strange. As a small note, the fake "plugin.dll" and "executeAPI" from the patch are enough to get the game to run. Note that on windows, there is no plugin.dll either - only that temporary DLL. Maybe a fallback when the temporary DLL can't be loaded? It only seems need that ZwOpenFile patch when actually having a real DLL called plugin.dll in the folder.
from your comments it pretty much looks like standard application virtualization/sandboxing using native API hooking.
Mh, could be, ENIGMA is known to do that. I don't know how I would debug something like that though - I hope'd it'd be simpler.
Is there any way I can get this game to test?
It's a bit difficult, since it's a paid game. However, I'd be willing to share my account temporarily for debugging purposes, if that'd be ok. Just know that the client is all Japanese and that you might need a VM to download, since the client doesn't work too well on Wine.