elastic / PPLGuard - Conditional Complexity

Intro

Conditional complexity (also called cyclomatic complexity) is a term used to measure the complexity of software. The term refers to the number of possible paths through a program function. A higher value ofter means higher maintenance and testing costs (infosecinstitute.com).
Conditional complexity is calculated by counting all conditions in the program that can affect the execution path (e.g. if statement, loops, switches, and/or operators, try and catch blocks...).
Conditional complexity is measured at the unit level (methods, functions...).
Units are classified in four categories based on the measured McCabe index: 1-5 (simple units), 6-10 (medium complex units), 11-25 (complex units), 26+ (very complex units).

Learn more...

Conditional Complexity Overall

There are 60 units with 1,761 lines of code in units (22.3% of code).

1 very complex units (228 lines of code)
0 complex units (0 lines of code)
7 medium complex units (493 lines of code)
16 simple units (616 lines of code)
36 very simple units (424 lines of code)

Legend:

51+

26-50

11-25

6-10

1-5

Alternative Visuals

3D view of all units

Conditional Complexity per Extension

51+

26-50

11-25

6-10

1-5

Conditional Complexity per Logical Component

primary logical decomposition

51+

26-50

11-25

6-10

1-5

Most Complex Units

Top 50 most complex units

Unit	# lines	McCabe index	# params
BOOL HardenKnownDlls() in PPLGuard/exploit.cpp	228	53	0
BOOL FindProcessTokenAndDuplicate() in PPLGuard/exploit.cpp	91	24	4
void DoStuff() in PPLGuardDll/dllexploit.cpp	72	17	0
BOOL DeleteKnownDllEntry() in PPLGuardDll/dllexploit.cpp	78	16	1
BOOL MakeKnownDllsReadOnly() in PPLGuardDll/dllexploit.cpp	77	15	1
BOOL TokenCheckPrivilege() in PPLGuard/utils.cpp	71	14	3
BOOL ProcessGetProtectionLevelAsString() in PPLGuard/utils.cpp	49	13	2
BOOL ProcessGetPIDFromName() in PPLGuard/utils.cpp	55	11	2
BOOL APIENTRY DllMain() in PPLGuardDll/PPLGuardDll.cpp	27	10	3
BOOL FindFileForTransaction() in PPLGuard/exploit.cpp	47	10	2
BOOL WritePayloadDllTransacted() in PPLGuard/exploit.cpp	54	10	1
BOOL HardenAntiMalwareServiceToken() in PPLGuardDll/dllexploit.cpp	59	9	1
BOOL CheckRequirements() in PPLGuard/exploit.cpp	59	9	0
BOOL ParseArguments() in PPLGuard/utils.cpp	39	9	2
BOOL ProcessGetIntegrityLevel() in PPLGuard/utils.cpp	32	9	2
BOOL HardenAntiMalwareServices() in PPLGuardDll/dllexploit.cpp	41	8	0
BOOL CheckKnownDllSymbolicLink() in PPLGuard/exploit.cpp	47	8	2
BOOL TokenGetSid() in PPLGuard/utils.cpp	35	8	2
void LogToConsole() in PPLGuardDll/dllexploit.cpp	34	7	2
BOOL ParseCommandLine() in PPLGuardDll/dllexploit.cpp	28	7	0
BOOL ImpersonateUser() in PPLGuard/exploit.cpp	26	7	4
BOOL PrepareCommandLine() in PPLGuard/exploit.cpp	30	7	2
VOID PrintVerbose() in PPLGuard/utils.cpp	30	6	2
BOOL TokenIsNotRestricted() in PPLGuard/utils.cpp	28	6	2
BOOL IsCurrentUserSystem() in PPLGuard/exploit.cpp	21	5	1
BOOL GetHijackableDllName() in PPLGuard/exploit.cpp	20	5	1
BOOL GetPayloadDll() in PPLGuard/exploit.cpp	31	5	2
BOOL TokenGetUsername() in PPLGuard/utils.cpp	27	5	2
BOOL MiscGenerateGuidString() in PPLGuard/utils.cpp	19	5	1
BOOL MapDll() in PPLGuard/exploit.cpp	26	4	2
VOID PrintDebug() in PPLGuard/utils.cpp	28	4	2
BOOL ProcessGetProtectionLevel() in PPLGuard/utils.cpp	22	4	2
BOOL GetCurrentDllFileName() in PPLGuardDll/dllexploit.cpp	17	3	1
BOOL ProcessIsAMPPL() in PPLGuardDll/dllexploit.cpp	16	3	1
BOOL TokenGetSidAsString() in PPLGuard/utils.cpp	14	3	2
BOOL TokenCompareSids() in PPLGuard/utils.cpp	15	3	2
void LogLastError() in PPLGuardDll/dllexploit.cpp	6	2	1
int wmain() in PPLGuard/PPLGuard.cpp	7	2	2
BOOL Impersonate() in PPLGuard/exploit.cpp	10	2	1
BOOL UnmapDll() in PPLGuard/exploit.cpp	12	2	1
BOOL CreateProtectedProcessAsUser() in PPLGuard/exploit.cpp	16	2	3
HANDLE ObjectManagerCreateDirectory() in PPLGuard/utils.cpp	17	2	1
HANDLE ObjectManagerCreateSymlink() in PPLGuard/utils.cpp	19	2	2
void APIENTRY LogonUserExExW() in PPLGuardDll/PPLGuardDll.cpp	1	1	0
void APIENTRY BriCreateBrokeredEvent() in PPLGuardDll/PPLGuardDll.cpp	1	1	0
void APIENTRY BriDeleteBrokeredEvent() in PPLGuardDll/PPLGuardDll.cpp	1	1	0
void APIENTRY EaCreateAggregatedEvent() in PPLGuardDll/PPLGuardDll.cpp	1	1	0
void APIENTRY EACreateAggregateEvent() in PPLGuardDll/PPLGuardDll.cpp	1	1	0
void APIENTRY EaQueryAggregatedEventParameters() in PPLGuardDll/PPLGuardDll.cpp	1	1	0
void APIENTRY EAQueryAggregateEventData() in PPLGuardDll/PPLGuardDll.cpp	1	1	0