Hello, while working with EAC, I tracked down an error to EAC requiring the ntdll.dll it has read from system32 being over 4095 bytes in size.  For some reason, it seems that the fake dlls have recently dropped in size, and consist of only a header.  EAC also reads the export table later on and checks for mov instructions that are present in the old fake DLLs.