Quote:
Originally Posted by ikillyouall
Theres more to it then just !endthreadex. Thats just the main part you look for. Will have a number like 38 or 39 at the end of it. Don't really know how else to explain it so I might work on a picture guide.
@kabalista
I myself tested it and got it to work.
|
I used this method before, but since 4 months ago process explorer does not find any adress at cabalmain.exe with "!endthreadex" so i quited. If you can make a picture guide will be great

Yesterday i was trying to find it by my own but evry time i suspended any adress, Cabal crashed...