In my injected DLL I have tried to use the hardcoded addresses give in the 3.3.5 Offset topic but whenever I read from the D3D Device pointer address (0x00C5DF80), I read 0x00000000. Can anyone give me insight on how to find the Driect3D device VMT table either in disassembly or at runtime?