SizeOfImage mean in the MODULEINFO structure?
It's the size in terms of mapped address space when loaded.
Because it's getting the information from the loader, who has no use for such things.
You tend to think of them the same, but they destruct differently.
Who's renaming everything into something cute?
You are part of the decision.
You'll have to drain them out yourself.
Peeking behind the curtain.
main() function always at address 0x00401000 in a simple program?
When multiple technical decision add up, literally.
From somebody else's reality distortion field.
Things it does that you may not know about.