ASLR/DEP

Disable: HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\MoveImages установить в 0 или EMET: https://technet.microsoft.com/en-us/security/jj653751