It's possible to use intercepts, but you have to fool HShield first. I'm going to test some functions and then I will start debugging again.
For crash solution, did you put a correct basepointer address you found? You cannot copy memory from 0x00000000 address. Like if basepointer == 0 then printf "Invalid address". This source isn't just copy, paste and go. This is just a tutorial to show you possibilities.
btw:
Somebody - recommend me a good Kernel debugger with attach to active process option (Detection isn't problem, I have my tricks)
For crash solution, did you put a correct basepointer address you found? You cannot copy memory from 0x00000000 address. Like if basepointer == 0 then printf "Invalid address". This source isn't just copy, paste and go. This is just a tutorial to show you possibilities.
btw:
Somebody - recommend me a good Kernel debugger with attach to active process option (Detection isn't problem, I have my tricks)