There is a less known LoadModule API from kernel32.dll that can be used to launch applications the same way as WinExec and others.