Kernel pointers copied to output user mode buffer with ioctl 0x22A014 in the appid.sys driver. - View it on GitHub