Interesting, I wonder why DEP would degrade process creation performance. My understanding is it's just a flag in page table entries to forbid execution, I am not sure how this could impact performance so much (except that data and code now have to be mapped separately).