#pragma once

VOID Initlog();

NTSTATUS SetLog(
	_In_ PFLT_CALLBACK_DATA Data,
	_In_ PCFLT_RELATED_OBJECTS FltObjects,
	_In_ ULONG code,
	_In_ ULONG a0,
	_In_ ULONG a1,
	_In_ ULONG a2,
	_In_ PWCHAR processName,
	_In_ PWCHAR path
);

NTSTATUS SetProcessLog(
	_In_ ULONG code,
	_In_ ULONG a0,
	_In_ ULONG a1,
	_In_ ULONG a2,
	_In_ PWCHAR processName,
	_In_ PWCHAR processParameter,
	_In_ PWCHAR parentProcessName
);

NTSTATUS SetConnectLog(
	_In_ PCFLT_RELATED_OBJECTS FltObjects,
	_In_ ULONG a0,
	_In_ ULONG a1,
	_In_ ULONG a2,
	_In_ PWCHAR volum,
	_In_ PWCHAR processName,
	_In_ PWCHAR path
);

NTSTATUS SetENLog(PFLT_CALLBACK_DATA data, ULONG code, ULONG devicetype, ULONG state, ULONG filesize, PWCHAR process_name, PWCHAR path, PWCHAR prenampath);

VOID Cleanuplog();
NTSTATUS GetLog(PVOID buf, ULONG size, ULONG* req);
void RptNotifyEvent();