Get the Whitepaper called Bypassing Hardware Based Data Execution Prevention (DEP) on Windows 2003 SP2.
You can download it from the following link: https://packetstormsecurity.com/files/download/78274/bypass-dep.pdf
Source: https://packetstormsecurity.com/files/78274/Bypassing-Hardware-Based-DEP.html