System权限启动实例

success ＝ DuplicateTokenEx (TokenHandle, 位或 (#TOKEN_ADJUST_DEFAULT, #TOKEN_ADJUST_SESSIONID, #TOKEN_QUERY, #TOKEN_DUPLICATE, #TOKEN_ASSIGN_PRIMARY), 0, 2, 1, newSystemToken)
.如果真 (success ＜ 1)
CloseHandle (ProcessHandle)
返回 (假)
.如果真结束
b ＝ 编码_Ansi到Unicode (路径, )
ret ＝ CreateProcessWithTokenW (newSystemToken, 0, 取变量数据地址 (b), 0, 0, 0, 0, si, pi)
CloseHandle (ProcessHandle)