Checks if the current process in running with elevation ...

CheckElevation.inc

; kernel32.dll, advapi32.dll, 79 bytes
CheckElevation:
	virtual at RBP-.FRAME
			rq 4
		.P5	dq ?

		.hTok	dq ?		; HANDLE
		.tLen	dd ?
		.tInfo	TOKEN_ELEVATION

		_align 16
		.FRAME := $ - $$
	end virtual
	enter .FRAME,0
	GetCurrentProcess
	xchg rcx,rax
	OpenProcessToken rcx, TOKEN_QUERY, ADDR .hTok
	xchg ecx,eax ; BOOL
	jrcxz .fail
	GetTokenInformation [.hTok], TokenElevation,\
		ADDR .tInfo, sizeof TOKEN_ELEVATION, ADDR .tLen
	test eax,eax ; BOOL
	jnz .close_handle
	; forward function fail
	mov [.tInfo.TokenIsElevated],eax
.close_handle:
	CloseHandle [.hTok]
	mov ecx,[.tInfo.TokenIsElevated]
.fail:
	leave
	retn
; result in ECX, use JRCXZ to respond to boolean value