Do you know how to use CE?
if not... Please study the basics of CE
Assuming that you have a little knowledge in CE here are the steps:
Open CE, Attach to cabalmain.exe (You must have a bypass)
1.) while the astral bow is in use, search 1 in CE, must be 4 bytes
2.) then deactivate astral bow, search for zero..
3.) repeat step 1 and 2 until you have a few address left, usually 4 to 5 address
4.) try to change each address' values, try to change each addresses by 100. until you got the right one