The Denuvo hack uses Windows Hypervisor to intercept cpuid, maybe that would work?