escape cmd correctly in execute