Please note that the lpUserSid parameter in ReportEvent don't added because it needs passing a new struct from Python to it, and we don't need this parameter for the usage of implement NTEventLogHandler. If we want add it in the future, we can add it as kwargs.

Docuements for these functions:

• RegisterEventSource: https://learn.microsoft.com/en-us/windows/win32/api/winbase/nf-winbase-registereventsourcew
• DeregisterEventSource: https://learn.microsoft.com/en-us/windows/win32/api/winbase/nf-winbase-deregistereventsource
• ReportEventW: https://learn.microsoft.com/en-us/windows/win32/api/winbase/nf-winbase-reporteventw

For the NTEventLogHandler, there is a implementation detail:

The old implementation based on pywin32, if dllname is not specified, pywin32 will using a vendored dll in that package, as a log template for the NT event log system.

For the new implement in this PR, if the dllname is not specified, I decided not to register the dll. As a result, the log still can be send to the NT Event Log System, we can see it in the Event Viewer.

But the event will show some thing like this (I just use a picture from the Internet because I'm using a localized Windows which the text is Chinese but they are the same thing):

And I think it's OK because we can check the Detail tab to see the original message, for develop purpose this is enough. For users with production usage, they can provide their own dlls as the message template.

• Issue: Remove external dependency for logging.handlers.NTEventLogHandler #135852