Function InitializeLogReader

RedEdr/logreader.cpp:123–151

BOOL InitializeLogReader(std::vector<HANDLE>& threads) {
    std::wstring directory;
    std::wstring pattern;

    directory = L"C:\\ProgramData\\Microsoft\\Windows Defender\\Support";
    pattern = L"MPLog-*";

    if (TRUE) {
        directory = L"C:\\temp";
        pattern = L"test*";
    }

    std::wstring path = findFiles(directory, pattern);
    if (path == L"") {
        LOG_A(LOG_ERROR, "LOG: File not found: %ls", pattern.c_str());
        return 1;
    }

    wchar_t* real_path = wstring2wcharAlloc(path);
    HANDLE thread = CreateThread(NULL, 0, LogReaderProcessingThread, (LPVOID)real_path, 0, NULL);
    if (thread == NULL) {
        LOG_A(LOG_ERROR, "LOG: Failed to create thread for trace session logreader");
        return 1;
    }
    threads.push_back(thread);

    //tailFileW(path.c_str());
    return TRUE;
}