api_log.dll now hides processes and api_log.dll: "sniff_hit","sysanalyzer","windump","olly","api_log","vmware","vmnat","vmount","vnet". reworked real function lookup a bit to make more reliable, now explicit by dll and name