CreateProcess()' lpCommandLine argument is LPTSTR (not LPCTSTR) and can therefore be potentially modified by CreateProcess().

Should the argument instead use a pointer (to an array of wchar_t?)?