Check for DWM warnings, context: https://github.com/ramensoftware/windhawk-mods/pull/1293#discussion_r1868305153

HasDwminitWarningInLastMinute.cpp

#include <winevt.h>

bool HasDwminitWarningInLastMinute() {
    const WCHAR* queryPath = L"Application";
    const WCHAR* query =
        L"*[System[Provider[@Name='Dwminit'] and (Level=3) and "
        L"TimeCreated[timediff(@SystemTime) <= 60000]]]";

    EVT_HANDLE queryHandle = EvtQuery(nullptr,    // Local machine
                                      queryPath,  // Log path (Application log)
                                      query,      // Query
                                      EvtQueryChannelPath  // Query flags
    );
    if (!queryHandle) {
        Wh_Log(L"EvtQuery failed with error: %u", GetLastError());
        return false;
    }

    bool found = false;

    EVT_HANDLE eventHandle = nullptr;
    DWORD dwReturned = 0;
    constexpr DWORD kTimeout = 1000;
    if (EvtNext(queryHandle, 1, &eventHandle, kTimeout, 0, &dwReturned)) {
        found = true;
        EvtClose(eventHandle);
    } else if (GetLastError() != ERROR_NO_MORE_ITEMS) {
        Wh_Log(L"EvtNext failed with error: %u", GetLastError());
    }

    EvtClose(queryHandle);
    return found;
}