Method sectionMapValuer

pkg/filter/ql/function.go:630–646

sectionMapValuer returns map valuer with PE section data.

(segments []*BoundSegmentLiteral, section pe.Sec)

// sectionMapValuer returns map valuer with PE section data.
func (f *Foreach) sectionMapValuer(segments []*BoundSegmentLiteral, section pe.Sec) MapValuer {
	var valuer = MapValuer{}
	for _, seg := range segments {
		key := seg.Value
		switch seg.Segment {
		case fields.NameSegment:
			valuer[key] = section.Name
		case fields.SizeSegment:
			valuer[key] = section.Size
		case fields.EntropySegment:
			valuer[key] = section.Entropy
		case fields.MD5Segment:
			valuer[key] = section.Md5
		}
	}
	return valuer
}