win32evtlog.EvtGetExtendedStatus

str = EvtGetExtendedStatus()

Returns additional error info from last Evt* call