Bug fixes and new feature

* A bug in dll finder by scanning mapped images when process is not
initialized yet has been fixed.
* New feature: BuildNtSysCalls creates relocatable code that makes
ntdll's syscalls directly bypassing any hook. Useful when hooking
another application and want to avoid third-party ntdll api hooks.
* Minor change in some files location.