VOYEUR: Bugfixes for getField1CE method

1 files changed, 3 insertions, 2 deletions

diff --git a/engines/voyeur/files_threads.cpp b/engines/voyeur/files_threads.cpp
index dc9d014992..0c0e9aba9e 100644
--- a/engines/voyeur/files_threads.cpp
+++ b/engines/voyeur/files_threads.cpp
@@ -169,10 +169,11 @@ void ThreadResource::getButtonsFlags() {
 void ThreadResource::getField1CE() {
 	int idx = 0;
 	
-	for (const byte *p = _field4A; *p != 0x49; p = getNextRecord(p)) {
+	for (const byte *p = _field4A; *p++ != 0x49; p = getNextRecord(p)) {
 		assert(idx < 47);
 		_field1CE[idx++] = getRecordOffset(p);
 		_field1CE[idx] = NULL;
+		p += 4;
 	}
 }
 
@@ -199,7 +200,7 @@ void ThreadResource::initUseCount() {
 }
 
 const byte *ThreadResource::getRecordOffset(const byte *p) {
-	uint32 recSize = READ_LE_UINT32(p) + READ_LE_UINT32(p + 6);
+	uint32 recSize = READ_LE_UINT32(p) + READ_LE_UINT32(_ctlPtr + 6);
 	return _ctlPtr + recSize;
 }