typedef struct _SHELLEXECUTEINFO {
DWORD cbSize; // dw ?
ULONG fMask; // What???
HWND hwnd; // dd ?
LPCTSTR lpVerb; // NULL, edit, etc.
LPCTSTR lpFile; // null terminated aka db 'la-la',0
LPCTSTR lpParameters; // OK!
LPCTSTR lpDirectory; // NULL, etc.
int nShow; // SW_SHOW
HINSTANCE hInstApp; // dd ?
LPVOID lpIDList; //
LPCTSTR lpClass; // GUID
HKEY hkeyClass; // ...
DWORD dwHotKey; // NULL ?
union {
HANDLE hIcon;
HANDLE hMonitor;
} DUMMYUNIONNAME; // Who is this? ???
HANDLE hProcess;
} SHELLEXECUTEINFO, *LPSHELLEXECUTEINFO;

struc SHELLEXECUTEINFO {
  .:
  .cbSize       dd ?
  .fMask        dd ?
  .hwnd         dd ?
  .lpVerb       dd ?
  .lpFile       dd ?
  .lpParameters dd ?
  .lpDirectory  dd ?
  .nShow        dd ?
  .hInstApp     dd ?
  .lpIDList     dd ?
  .lpClass      dd ?
  .hkeyClass    dd ?
  .dwHotKey     dd ?
  label .hIcon dword
  .hMonitor     dd ?
  .hProcess     dd ?
  .. = $ - .
}    

LOCAL sei:SHELLEXECUTEINFO
    
    INVOKE RtlZeroMemory, ADDR sei, SIZEOF sei
    mov sei.cbSize, SIZEOF SHELLEXECUTEINFO
    mov eax, hWnd
    mov sei.hwnd, eax
    mov sei.fMask, SEE_MASK_FLAG_DDEWAIT OR SEE_MASK_FLAG_NO_UI
    mov eax, CTXT("runas")
    mov sei.lpVerb, eax
    mov eax, pFilename
    mov sei.lpFile, eax
    mov eax, pParameters 
    mov sei.lpParameters, eax
    mov sei.nShow, SW_SHOWNORMAL
    INVOKE ShellExecuteEx, ADDR sei
la-la-la-...    

format PE GUI 4.0
include 'win32ax.inc'

.data

SEE_MASK_DEFAULT                = 0x00000000
SEE_MASK_CLASSNAME              = 0x00000001
SEE_MASK_CLASSKEY               = 0x00000003
SEE_MASK_IDLIST                 = 0x00000004
SEE_MASK_INVOKEIDLIST           = 0x0000000C
SEE_MASK_ICON                   = 0x00000010
SEE_MASK_HOTKEY                 = 0x00000020
SEE_MASK_NOCLOSEPROCESS         = 0x00000040
SEE_MASK_CONNECTNETDRV          = 0x00000080
SEE_MASK_NOASYNC                = 0x00000100
SEE_MASK_FLAG_DDEWAIT           = 0x00000100
SEE_MASK_DOENVSUBST             = 0x00000200
SEE_MASK_FLAG_NO_UI             = 0x00000400
SEE_MASK_UNICODE                = 0x00004000
SEE_MASK_NO_CONSOLE             = 0x00008000
SEE_MASK_ASYNCOK                = 0x00100000
SEE_MASK_HMONITOR               = 0x00200000
SEE_MASK_NOZONECHECKS           = 0x00800000
SEE_MASK_NOQUERYCLASSSTORE      = 0x01000000
SEE_MASK_WAITFORINPUTIDLE       = 0x02000000
SEE_MASK_FLAG_LOG_USAGE         = 0x04000000

struc SHELLEXECUTEINFO {
  .:
  .cbSize       dd ?
  .fMask        dd ? 
  .hwnd         dd ? 
  .lpVerb       dd ? 
  .lpFile       dd ? 
  .lpParameters dd ? 
  .lpDirectory  dd ? 
  .nShow        dd ? 
  .hInstApp     dd ? 
  .lpIDList     dd ? 
  .lpClass      dd ? 
  .hkeyClass    dd ? 
  .dwHotKey     dd ? 
  label .hIcon dword 
  .hMonitor     dd ? 
  .hProcess     dd ? 
  .. = $ - . 

  ; Requests the OS to run the executable elevated.
  ; Returns TRUE if successful, or FALSE otherwise.
  ; If FALSE then return error information in edx
  macro .RunElevated hWnd*,pFilename*,pParameters* \{
    \local ..okay
    invoke RtlZeroMemory,.,..
    mov [.cbSize],..
    mov [.hwnd],hWnd
    mov [.fMask],SEE_MASK_FLAG_DDEWAIT or SEE_MASK_FLAG_NO_UI
    mov [.lpVerb],_runas
    mov [.lpFile],pFilename
    mov [.lpParameters],pParameters
    mov [.nShow],SW_SHOWNORMAL
    invoke ShellExecuteEx,.
    test eax,eax
    jnz ..okay
    invoke GetLastError
    mov edx, eax
    xor eax, eax
    ..okay:
  \}
}

  _runas   db 'runas',0
  _notepad db 'notepad.exe',0
  _test    db 'w32.semiono.asm',0

  align 4

  sei SHELLEXECUTEINFO

.code

start:

  sei.RunElevated 0,_notepad,_test

  invoke  ExitProcess,0

.end start    

invoke RtlZeroMemory,.,..