if your leaving the dash frame in place,then there are 5 speed nuts towards the rear back of the dash and 3 more just behind were the gauge are is, and 3 more just behind the glove box area,,11 total and then the 4 bolts at the vents that you say you removed,,also on each end of the dash mine had a screw,you can see them when the doors are open,,and of course you have removed the outer trim i assume