It opens it's process and hackshield can detect it.
I only got it to work for about 5 mins, depending on when it disconnects me because I disabled hackshield protection.
Hackshield over writes the following API: OpenProcess, ReadProcess, and WriteProcess. There a lot more about hacking Hackshield, if you do some research. I did some and found out very interesting things about it.