Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution - View it on GitHub