EVENTLOG_FORWARDS_READ

• LPBY_HANDLE_FILE_INFORMATION
• LPCOMMCONFIG
• LPCOMMPROP
• LPCOMMTIMEOUTS
• LPCOMSTAT
• LPCREATE_PROCESS_DEBUG_INFO
• LPCREATE_THREAD_DEBUG_INFO
• LPDCB
• LPEXCEPTION_DEBUG_INFO
• LPEXIT_THREAD_DEBUG_INFO
• PFILETIME, LPFILETIME

• BACKUP_INVALID
• BAUD_075
• CALLBACK_CHUNK_FINISHED
• CBR_110
• COPY_FILE_FAIL_IF_EXISTS
• CREATE_NEW
• DATABITS_5
• DEBUG_PROCESS
• DRIVE_UNKNOWN
• DTR_CONTROL_DISABLE
• EVENTLOG_SUCCESS
• EXCEPTION_DEBUG_EVENT
• EXCEPTION_EXECUTE_HANDLER
• FILE_BEGIN
• FILE_MAP_COPY
• FILE_TYPE_UNKNOWN
• GET_TAPE_MEDIA_INFORMATION
• LOGON32_LOGON_INTERACTIVE
• LOGON32_LOGON_NETWORK_CLEARTEXT
• LOGON32_PROVIDER_DEFAULT
• LOGON_WITH_PROFILE
• MAXINTATOM
• MUTEX_ALL_ACCESS
• NMPWAIT_NOWAIT
• NOPARITY
• OF_READ
• ONESTOPBIT
• PCF_DTRDSR
• PIPE_ACCESS_INBOUND
• PROGRESS_CONTINUE
• PST_UNSPECIFIED
• RTS_CONTROL_DISABLE
• SCS_32BIT_BINARY
• SEM_FAILCRITICALERRORS
• SETXOFF
• SET_TAPE_MEDIA_INFORMATION
• SLE_ERROR
• SP_PARITY
• STATUS_WAIT_0
• STD_INPUT_HANDLE
• STOPBITS_10
• STREAM_NORMAL_ATTRIBUTE
• TC_NORMAL
• THREAD_PRIORITY_IDLE
• TIME_ZONE_ID_UNKNOWN
• WAIT_IO_COMPLETION

• HINSTANCE_ERROR
• IGNORE
• INFINITE
• MAXIMUM_SUSPEND_COUNT
• MAXIMUM_WAIT_OBJECTS
• SHUTDOWN_NORETRY
• SP_SERIALCOMM
• WAIT_ABANDONED_0
• WAIT_OBJECT_0

• BY_HANDLE_FILE_INFORMATION
• COMMCONFIG
• COMMPROP
• COMMTIMEOUTS
• COMSTAT
• CREATE_PROCESS_DEBUG_INFO
• CREATE_THREAD_DEBUG_INFO
• DCB
• EXCEPTION_DEBUG_INFO
• EXIT_THREAD_DEBUG_INFO
• FILETIME

• ACTCTX_FLAG_APPLICATION_NAME_VALID
• ACTCTX_FLAG_ASSEMBLY_DIRECTORY_VALID
• ACTCTX_FLAG_HMODULE_VALID
• ACTCTX_FLAG_LANGID_VALID
• ACTCTX_FLAG_PROCESSOR_ARCHITECTURE_VALID
• ACTCTX_FLAG_RESOURCE_NAME_VALID
• ACTCTX_FLAG_SET_PROCESS_DEFAULT
• CE_BREAK
• CE_DNS
• CE_FRAME
• CE_IOE
• CE_MODE
• CE_OOP
• CE_OVERRUN
• CE_PTO
• CE_RXOVER
• CE_RXPARITY
• CE_TXFULL
• CONSOLE_TEXTMODE_BUFFER
• DDD_EXACT_MATCH_ON_REMOVE
• DDD_RAW_TARGET_PATH
• DDD_REMOVE_DEFINITION
• DEACTIVATE_ACTCTX_FLAG_FORCE_EARLY_DEACTIVATION
• DOCKINFO_DOCKED
• DOCKINFO_UNDOCKED
• DOCKINFO_USER_DOCKED
• DOCKINFO_USER_SUPPLIED
• DOCKINFO_USER_UNDOCKED
• DONT_RESOLVE_DLL_REFERENCES
• EVENTLOG_BACKWARDS_READ
• EVENTLOG_FORWARDS_READ
• EVENTLOG_SEEK_READ
• EVENTLOG_SEQUENTIAL_READ
• EV_BREAK
• EV_CTS
• EV_DSR
• EV_ERR
• EV_EVENT1
• EV_EVENT2
• EV_PERR
• EV_RING
• EV_RLSD
• EV_RX80FULL
• EV_RXCHAR
• EV_RXFLAG
• EV_TXEMPTY
• FILE_FLAG_BACKUP_SEMANTICS
• FILE_FLAG_DELETE_ON_CLOSE
• FILE_FLAG_FIRST_PIPE_INSTANCE
• FILE_FLAG_NO_BUFFERING
• FILE_FLAG_OPEN_NO_RECALL
• FILE_FLAG_OPEN_REPARSE_POINT
• FILE_FLAG_OVERLAPPED
• FILE_FLAG_POSIX_SEMANTICS
• FILE_FLAG_RANDOM_ACCESS
• FILE_FLAG_SEQUENTIAL_SCAN
• FILE_FLAG_WRITE_THROUGH
• FILE_NAME_NORMALIZED
• FILE_NAME_OPENED
• FIND_ACTCTX_SECTION_KEY_RETURN_HACTCTX
• FIND_FIRST_EX_CASE_SENSITIVE
• FORMAT_MESSAGE_ALLOCATE_BUFFER
• FORMAT_MESSAGE_ARGUMENT_ARRAY
• FORMAT_MESSAGE_FROM_HMODULE
• FORMAT_MESSAGE_FROM_STRING
• FORMAT_MESSAGE_FROM_SYSTEM
• FORMAT_MESSAGE_IGNORE_INSERTS
• FORMAT_MESSAGE_MAX_WIDTH_MASK
• FS_CASE_IS_PRESERVED
• FS_CASE_SENSITIVE
• FS_FILE_COMPRESSION
• FS_PERSISTENT_ACLS
• FS_UNICODE_STORED_ON_DISK
• FS_VOL_IS_COMPRESSED
• GET_MODULE_HANDLE_EX_FLAG_FROM_ADDRESS
• GET_MODULE_HANDLE_EX_FLAG_PIN
• GET_MODULE_HANDLE_EX_FLAG_UNCHANGED_REFCOUNT
• GHND
• GMEM_FIXED
• GMEM_MODIFY
• GMEM_MOVEABLE
• GMEM_VALID_FLAGS
• GMEM_ZEROINIT
• GPTR
• HANDLE_FLAG_INHERIT
• HANDLE_FLAG_PROTECT_FROM_CLOSE
• HFILE_ERROR
• HW_PROFILE_GUIDLEN
• INVALID_FILE_SIZE
• INVALID_HANDLE_VALUE
• INVALID_SET_FILE_POINTER
• LHND
• LMEM_DISCARDABLE
• LMEM_DISCARDED
• LMEM_FIXED
• LMEM_INVALID_HANDLE
• LMEM_LOCKCOUNT
• LMEM_MODIFY
• LMEM_MOVEABLE
• LMEM_NOCOMPACT
• LMEM_NODISCARD
• LMEM_NONZEROLHND
• LMEM_NONZEROLPTR
• LMEM_ZEROINIT
• LOAD_IGNORE_CODE_AUTHZ_LEVEL
• LOAD_LIBRARY_AS_DATAFILE
• LOAD_WITH_ALTERED_SEARCH_PATH
• LOCKFILE_EXCLUSIVE_LOCK
• LOCKFILE_FAIL_IMMEDIATELY
• LPTR
• MAX_COMPUTERNAME_LENGTH
• MAX_PROFILE_LEN
• MOVEFILE_COPY_ALLOWED
• MOVEFILE_DELAY_UNTIL_REBOOT
• MOVEFILE_REPLACE_EXISTING
• MOVEFILE_WRITE_THROUGH
• MS_CTS_ON
• MS_DSR_ON
• MS_RING_ON
• MS_RLSD_ON
• NONZEROLHND
• NONZEROLPTR
• PIPE_CLIENT_END
• PIPE_NOWAIT
• PIPE_READMODE_BYTE
• PIPE_READMODE_MESSAGE
• PIPE_SERVER_END
• PIPE_TYPE_BYTE
• PIPE_TYPE_MESSAGE
• PIPE_UNLIMITED_INSTANCES
• PIPE_WAIT
• PROCESS_HEAP_ENTRY_BUSY
• PROCESS_HEAP_ENTRY_DDESHARE
• PROCESS_HEAP_ENTRY_MOVEABLE
• PROCESS_HEAP_REGION
• PROCESS_HEAP_UNCOMMITTED_RANGE
• PURGE_RXABORT
• PURGE_RXCLEAR
• PURGE_TXABORT
• PURGE_TXCLEAR
• QUERY_ACTCTX_FLAG_ACTCTX_IS_ADDRESS
• QUERY_ACTCTX_FLAG_ACTCTX_IS_HMODULE
• QUERY_ACTCTX_FLAG_USE_ACTIVE_ACTCTX
• REPLACEFILE_IGNORE_MERGE_ERRORS
• REPLACEFILE_WRITE_THROUGH
• SECURITY_ANONYMOUS
• SECURITY_CONTEXT_TRACKING
• SECURITY_DELEGATION
• SECURITY_EFFECTIVE_ONLY
• SECURITY_IDENTIFICATION
• SECURITY_IMPERSONATION
• SECURITY_SQOS_PRESENT
• SECURITY_VALID_SQOS_FLAGS
• STARTF_FORCEOFFFEEDBACK
• STARTF_FORCEONFEEDBACK
• STARTF_RUNFULLSCREEN
• STARTF_USECOUNTCHARS
• STARTF_USEFILLATTRIBUTE
• STARTF_USEHOTKEY
• STARTF_USEPOSITION
• STARTF_USESHOWWINDOW
• STARTF_USESIZE
• STARTF_USESTDHANDLES
• STILL_ACTIVE
• TLS_OUT_OF_INDEXES
• VOLUME_NAME_DOS
• VOLUME_NAME_GUID
• VOLUME_NAME_NONE
• VOLUME_NAME_NT
• WRITE_WATCH_FLAG_RESET