Cute idea of hooking VirtualAlloc to unpack into a new section: http://blog.crowdstrike.com/2012/10/unpacking-dynamically-allocated-code.html