Profiles show that getOwnPropertySlot/getOffset spends a lot of time on the initial branch in getOFfset that checks if the table is null. Now that PropertyMap no longer has to fit into a cell, it could keep a table up to a certain limit inline and avoid this null check.
Created attachment 23779 [details] patch for testing - does what I said, not sure if it is a speedup
This patch will not apply to ToT.