hooks: CreateMutexA/W, RtlGetLastWin32Error. -t honored for api hits, -llo now uses strstr to accept partial dll names