NTRTL.H

The public symbol file NTKRPAMP.PDB for the original release of 32-bit Windows 10 tells that the kernel is built with the NTRTL.H header at

d:\th.public.fre\internal\minwin\priv_sdk\inc

and draws from it the following type definition:

Line Number	Type
2211	struct _RTL_TIME_ZONE_INFORMATION

The header NTRTL.H is not known in any Device Driver Kit (DDK) or Windows Driver Kit (WDK).

Anti-Trust Settlement Forensics

For the record, here are the very many more types that Microsoft’s freely published URLMON.PDB reveals were accessible to the source code for URLMON.DLL from including this same NTRTL.H when building Internet Explorer for the original release of Windows 10:

Line Number	Type
135	struct _INVERTED_FUNCTION_TABLE_ENTRY
160	struct _INVERTED_FUNCTION_TABLE
197	union _FOUR_PART_VERSION
199	unnamed struct for Version32 in _FOUR_PART_VERSION
203	unnamed struct for Version16 in _FOUR_PART_VERSION
410	struct _MUICCENTRY
419	struct _MUICCHEADER
437	struct _MUILANGINFO
448	struct _MUILANGUAGES
456	struct _MUILANGCFGNODE
463	struct _MUILANGCFGLIST
472	struct _MUILANGLISTNODE
486	struct _LDR_RESLOADER_RET
492	struct _MUILANGLIST
504	struct _MUISTRINGPOOL
514	struct _MUIREGISTRYINFO
837	stuct _RC_CONFIG
1044	struct _RTL_PROCESS_BACKTRACE_INFORMATION
1052	struct _RTL_PROCESS_BACKTRACES
1060	enum _RTL_STACK_TRACE_DATABASE_CONTROL
1067	struct _RTL_STACK_TRACE_DATABASE_CREATE
1073	struct _RTL_PROCESS_BACKTRACES_CONTROL
1089	struct _RTL_PROCSS_VERIFIER_OPTIONS
1099	struct _RTL_STACK_CONTEXT_ENTRY
1106	struct _RTL_STACK_CONTEXT
1116	struct _RTL_TRACE_ENUMERATE
1135	struct _RTL_TRACE_BLOCK
1684	struct _RTL_USER_PROCESS_INFORMATION
1697	struct _RTL_USER_PROCESS_INFORMATION64
1725	struct _RTL_PROTECTED_ACCESS
2035	struct _RTL_PROCESS_LOCK_INFORMATION
2060	struct _RTL_PROCESS_LOCKS
2080	enum _EXCEPTION_LOG_TYPE
2086	struct _EXCEPTION_LOG
2111	struct _LAST_EXCEPTION_LOG
2211	struct _RTL_TIME_ZONE_INFORMATION
2221	struct _RTL_DYNAMIC_TIME_ZONE_INFORMATION
3020	struct _PARSE_MESSAGE_CONTEXT
3221	enum RTL_PHYSICAL_MEMORY_POLICY
3226	struct _RTL_PHYSICAL_MEMORY_INFO
3230	enum RTL_DISK_SPEED_POLICY
3235	struct _RTL_DISK_SPEED_INFO
3239	enum RTL_DISK_SPACE_POLICY
3246	struct _RTL_DISK_SPACE_INFO
3250	enum _RTL_RESOURCE_CATEGORY
3257	enum _RTL_RESOURCE_POLICY_FLAGS
3344	struct _RTL_SPARSE_BITMAP_RANGE
3354	struct _RTL_SPARSE_BITMAP_CTX
3372	struct _RTL_SPARSE_BITMAP_PARAMETER
3385	struct _RTL_SPARSE_BITMAP_RUN
3392	enum _RTL_SPARSE_BITMAP_CTX_OPERATION
3899	enum RTL_BSD_ITEM_TYPE
3951	struct _RTL_BACKOFF
4075	struct _TRIPLE_LIST_ENTRY
4090	struct _TRIPLE_LIST
4092	unnamed struct for ControlBits in unnamed union in _TRIPLE_LIST
4163	struct _TRIPLE_LIST_ITERATOR
4282	union _RTL_TICK_LOCK