Ulbright's Blog

A registry setting to forcibly enable or disable ASLR (Address Space Layout Randomization) for all executables and libraries.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management]
“MoveImages”=dword:00000000