Well, maybe it check itself over the internet for the right md5 checksum of the main exe? Then blocking the traffic make it work.
Or something like it...
Certainly there has to be a way. The number of mounted devices for "no CD patches" certainly exceed the 4-ones that Deamon Tools can mount...