- Use regular PE structures in NTOSKRNL/NTDLL/DISKDUMP.