+ moar VM anti detection
+ hook CreateSection to load process creation name