format PE GUI 4.0 on 'nul'

entry start

include 'myinclude.inc'

start:
  invoke GetStartupInfo,startinfo
  invoke CreateProcess,Notepad_EXE,NULL,NULL,NULL,FALSE,20h,NULL,NULL,startinfo,pinfo
  mov eax,1009000h ;eax is notepad.exe address in my xp os,so sorry ,but it`s no important  
  invoke ReadProcessMemory,dword[pinfo],eax,buf,buf_size,0
  invoke ExitProcess,0

  Notepad_EXE db 'd:\windows\notepad.exe',0
  buf_size=40960       ;ReadProcessMemory can read!
;  buf_size=40960+1     ;ReadProcessMemory can not read! why?
  buf rb buf_size
  startinfo STARTUPINFO
  pinfo PROCESSINFO
    

lpBaseAddress

Points to the base address in the specified process to be read. Before any data transfer occurs, the system verifies that all data in the base address and memory of the specified size is accessible for read access. If this is the case, the function proceeds; otherwise, the function fails.