Imported WinExec avoids the LoadLibraryA call, moved "WinExec" after the "MZ", "kernel32.dll" and "LoadLibraryA" strings moved into the PE header, "GetProcAddress" string is in the section table.