Crash engine.exe before hackshield is fully loaded, that way you can even dbg it with olly and the like. Just inject a dll when Hs is loading that does something like:
Code:
Dllmain(){
if( == Process_Attach){
__ASM INT 1h
}
}
Since no exception handlers have been set-up yet windows will freeze CA for you and you can debug it at will.