Improve detecting when to realign the payload

[hasherezade]

In case if the additional IAT is located in a virtual cave of the PE, it should be dumped as realigned in order to preserve it.
Example:

Import Table was reconstructed correctly, but some of the thunks are not in the range of the raw file

If we request explicitly that the file should be dumped as realigned (/dmode 3), this problem does not occur.
Yet, it should be detected and adjusted automatically if run in the auto-detect mode.

[hasherezade]

Result: the same PE is dumped automatically as realigned: