fix script.dump closure bug
Bug
Since NumVal of closure of bytecode output by ScriptDump is absolute address, when using LoadStream, it jumps to an invalid address.
Fix
Since the Closure value field is an address value, it has been changed to NumValAsCodeAddress so that relocation is possible.