Unburying this topic because I wanted to ask if someone knew if XC detects directX hooks / winapi hooks or if that's cool. The topic kind of fits the question too
Edit: Alright, adding some findings/thoughts to this:
0x00000001408C4360 seems to be the function for setting the speeds, and storing some XOR'd values
The weird thing is I can't seem to hook it, BDO just crashes (using MinHook). Maybe I'm retarded.
Also the Page seems to be ExecuteReadWrite by default!? Maybe they are checking for hooks?
If the new speed value is 0, the function is not used. Instead
0x00000001408C44A0 is used, which seems to have a simmilar process of XORing, with some minor differences.
Also both call the spooky 0x0000000140A471E0, it checks the current Thread ID and accesses the TLS, not sure what it really does though