In the past the guest binaries were built with the MSVC toolchain and /GS was used to protect against some stack attacks.
To support this a cookie in the entry point which was used to support this.
Since we are no longer using the MSVC compiler we probably don't need this an should consider removing it.