Dynamic translation of x86 sequences could give you some boost, as could use of asm.js.