EvtQueryForwardDirection
const win32evtlog.EvtQueryForwardDirection;