Hackshield Bypass crashes after a few minutes

So I was trying to create a hs bypass since the new hs is getting on my nerves because they detect my midfunction and hwbp hooks....
I checked all the functions that are exported by Ehsvc.dll and by returning the functions immediately I could do a short bypass, my chams with an normal jmp hook are working fine but after a few minutes it crashes... I suppose that it is because I have to bypass some callbacks too (as I read in other threads) ...but I am not sure, can someone give me more detail information about how I could get the checks where it crashs? ...I am playing CAEU btw

this is the point where I just write in a 0xC3 (RETN)

when I trace the function I get to this point.... When I exchange the push with another push because they jump to the same address it work as I would return immediately with a 0xC3 (see above)
(I did this to run the function quite ordinary but it still crashes after a few minutes)
But you can skip the part with push because I think it is not that importan and maybe a little bit confusing

...So please help me and tell me where I can find the checks that Engine?? or Ehsvc?? or both are doing after some time I hope to pass them when I know where they are located is not that hard

Engine is doing all the job for HS.
Its loading up the dll and initializes HS main functions.
Theres a little trick in there.
Blackcipher is checking if HS initialized all right *hint*
Also check for the debugstring of HS where it says the driver failed to load
If you need more help pm me or add me on skype though