Oh, yeah, you have to jump to the VMT first, so two dereferences it is.
Sometimes there are *more* than two, though (and sometimes there are none,
as when the compiler can determine the static type of the instance: this
happens more often than you might expect).