Fixed VMT detection (fixed #46).

KN4CK3R · KN4CK3R · commit bf6b42c0ea77 · 2018-02-25T10:22:17.000+01:00
diff --git a/ReClass.NET/Memory/NodeDissector.cs b/ReClass.NET/Memory/NodeDissector.cs
@@ -123,17 +123,10 @@ private static Type GuessPointerType(IntPtr address, MemoryBuffer memory)
 				if (section.Category == SectionCategory.DATA || section.Category == SectionCategory.HEAP) // If the section contains data, it is at least a pointer to a class or something.
 				{
 					// Check if it is a vtable. Check if the first 3 values are pointers to a code section.
-					bool valid = true;
-					for (var i = 0; i < 3; ++i)
-					{
-						var pointee = memory.Process.ReadRemoteIntPtr(address);
-						if (memory.Process.GetSectionToPointer(pointee)?.Category != SectionCategory.CODE)
-						{
-							valid = false;
-							break;
-						}
-					}
-					if (valid)
+					var possibleVmt = memory.Process.ReadRemoteObject<ThreePointersData>(address);
+					if (memory.Process.GetSectionToPointer(possibleVmt.Pointer1)?.Category == SectionCategory.CODE
+						&& memory.Process.GetSectionToPointer(possibleVmt.Pointer2)?.Category == SectionCategory.CODE
+						&& memory.Process.GetSectionToPointer(possibleVmt.Pointer3)?.Category == SectionCategory.CODE)
 					{
 						return typeof(VTableNode);
 					}
diff --git a/ReClass.NET/Memory/UnionDataType.cs b/ReClass.NET/Memory/UnionDataType.cs
@@ -69,4 +69,12 @@ public struct UInt64FloatDoubleData
 		[FieldOffset(0)]
 		public double DoubleValue;
 	}
+
+	[StructLayout(LayoutKind.Sequential)]
+	public struct ThreePointersData
+	{
+		public IntPtr Pointer1;
+		public IntPtr Pointer2;
+		public IntPtr Pointer3;
+	}
 }

Original file line number	Diff line number	Diff line change
`@@ -69,4 +69,12 @@ public struct UInt64FloatDoubleData`
`69`	`69`	`[FieldOffset(0)]`
`70`	`70`	`public double DoubleValue;`
`71`	`71`	`}`
	`72`	`+`
	`73`	`+ [StructLayout(LayoutKind.Sequential)]`
	`74`	`+ public struct ThreePointersData`
	`75`	`+ {`
	`76`	`+ public IntPtr Pointer1;`
	`77`	`+ public IntPtr Pointer2;`
	`78`	`+ public IntPtr Pointer3;`
	`79`	`+ }`
`72`	`80`	`}`