winapi::um::winevt
pub unsafe extern "system" fn EvtQuery( Session: EVT_HANDLE, Path: LPCWSTR, Query: LPCWSTR, Flags: DWORD) -> EVT_HANDLE