Finding RetarT pointer
Get the address of Initialize from in game
Goto the start on the Initialize in a debugger
look for something like
mov someregister, [0x00000000]
...
then you see that register being used later
push xxx
push xxx
call [register+offset in wrapper table]
Initialize would like this:
push xxx
push xx
call [register]

Should be very close to the start of all the functions no more than 10 instructions down, The address moved into the register in the RetarT pointer address.
This takes place in all client functions!