You need to search for :
75 ?? 83 0D ?? ?? ?? ?? 01 B8 ?? ?? ?? ?? E8
in crossfire.exe (not in CShell.dll)
now you need to scrol up or down(IDK if is up or down you will foudn it ) 4-5 line and you will find something like
"MOV EAX,crossfir.006D05A0"
so you make :
0x???????+0xA4 = wallhack addy