Add full support of Dll Memory Operation

Now Mojibake can get function address without original dll
Fix system file redirection in 64bits system