Address an import parsing problem.
Address an import parsing problem.

I've got a binary here which pefile parses imports correctly but YARA
does not. It appears that when parsing the Import Directory if
OriginalFirstThunk is zero you can use FirstThunk.

beikezcs/yara,foreni-packages/yara,cblichmann/yara,rayyang2000/yara,neatsun/yara,rednaga/yara,rayyang2000/yara,tanium/yara,wxsBSD/yara,Security513/yara,VirusTotal/yara,MeteorAdminz/yara,mgoffin/yara,digideskio/yara,wxsBSD/yara,cblichmann/yara,neatsun/yara,foreni-packages/yara,tanium/yara,binsrc/yara,msuvajac/yara,frbapolkosnik/yara,bmagistro/yara,hillu/yara,plusvic/yara,0x0mar/yara,tdr130/yara,hillu/yara,frbapolkosnik/yara,digideskio/yara,jpypi/yara,tdr130/yara,jpypi/yara,cblichmann/yara,cblichmann/yara,kallanreed/yara,smaudet/yara,pombredanne/yara,mgoffin/yara,binsrc/yara,binsrc/yara,bmagistro/yara,wxsBSD/yara,plusvic/yara,hillu/yara,tanium/yara,mgoffin/yara,binsrc/yara,pombredanne/yara,tdr130/yara,jpypi/yara,hillu/yara,kallanreed/yara,cblichmann/yara,Security513/yara,0x0mar/yara,plusvic/yara,neatsun/yara,jshufelt/yara,digideskio/yara,0x0mar/yara,VirusTotal/yara,MeteorAdminz/yara,rednaga/yara,jshufelt/yara,0x0mar/yara,wxsBSD/yara,hillu/yara,frbapolkosnik/yara,beikezcs/yara,mgoffin/yara,smaudet/yara,Security513/yara,pombredanne/yara,wxsBSD/yara,rayyang2000/yara,plusvic/yara,smaudet/yara,beikezcs/yara,jshufelt/yara,VirusTotal/yara,plusvic/yara,MeteorAdminz/yara,msuvajac/yara,kallanreed/yara,smaudet/yara,pombredanne/yara,msuvajac/yara,bmagistro/yara,VirusTotal/yara,VirusTotal/yara,foreni-packages/yara,pombredanne/yara,digideskio/yara,frbapolkosnik/yara,rednaga/yara,jshufelt/yara