function Ransomware:HeaderCheck()

in ransomware/artifact.lua [2867:2885]

• 16 lines of code
• 4 McCabe index (conditional complexity)

function Ransomware:HeaderCheck(eventData, processData)
    if nil == next(eventData.headerBytes) then
        return
    end

    if eventData.officeLockFile then
        utils.DebugLog('office lock file skip header check: ' .. eventData.filePath)
        return
    end

    eventData.headerMismatch = self.HeaderComparison(eventData, processData, eventData.currentExtensionData)
    utils.DebugLog('eventData.headerMismatch: ' .. tostring(eventData.headerMismatch))

    if globals.FILE_RENAME == eventData.operation and eventData.filePreviousExtension ~= eventData.fileExtension then
        eventData.previousHeaderMismatch =
            self.HeaderComparison(eventData, processData, eventData.previousExtensionData)
        utils.DebugLog('eventData.previousHeaderMismatch: ' .. tostring(eventData.previousHeaderMismatch))
    end
end