port to libyara 2.0 API