rapid7/metasploit-framework — pull request #2758 by zeroSteiner (2013-12-12 15:32:46+00:00)
Title: Add railgun definitions for local exploit relevant functions.

This PR updates the parameter types of CreateRemoteThread and NtDeviceIoControlFile and adds NtAllocateVirtualMemory and NtQueryIntervalProfile.

These functions are used in a few windows local exploit modules including ms11_080_afdjoinleaf, novell_client_nwfs, novell_client_nicm, and ms_ndproxy (not yet landed PR #2755).

It looks like the code has been copied and pasted across these modules so the usage of these functions, primarily NtAllocateVirutalMemory, NtDeviceIoControlFile and NtQueryIntervalProfile, are all consistent.