EVENTLOG_BACKWARDS_READ
const win32evtlog.EVENTLOG_BACKWARDS_READ;