You need of send "loadlib" to the folder of crossfire bro... and run "loadlib", after you can open the ollydbg and attach this process "loadlib" for debug, or you can download PE Tools, and dump CShell with the same instructions previous
- - - Updated - - -
Or you can get this form :DWORD CShell = ( DWORD ) GetModuleHandle("CShell.dll");