construct full filepath queries for ntquerydirectoryfile
obtain full paths for createprocessinternalw and shellexecuteexw
add information-class for ntquerydirectoryfile, fix two small errors
improved experimental filepath alias resolving
initially spoof the hook-info object to avoid infinite recursion, thanks Accuvant
further improve ignored filepaths