From b8f4ecd6663c6a6c04e4009ecff4db0ee4d64efe Mon Sep 17 00:00:00 2001
From: praydog <praydog@praydog.com>
Date: Sun, 22 Oct 2023 14:37:24 -0700
Subject: [PATCH] SDK: Optimize GMalloc scan speed

---
 shared/sdk/FMalloc.cpp | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

diff --git a/shared/sdk/FMalloc.cpp b/shared/sdk/FMalloc.cpp
index cc575641..150fda94 100644
--- a/shared/sdk/FMalloc.cpp
+++ b/shared/sdk/FMalloc.cpp
@@ -1,3 +1,5 @@
+#include <unordered_set>
+
 #include <utility/Scan.hpp>
 #include <utility/Module.hpp>
 #include <spdlog/spdlog.h>
@@ -40,7 +42,9 @@ FMalloc* FMalloc::get() {
 
         FMalloc** result = nullptr;
 
-        utility::exhaustive_decode((uint8_t*)*object_base_init_fn, 0x1000, [&](utility::ExhaustionContext& ctx) -> utility::ExhaustionResult {
+        std::unordered_set<uintptr_t> seen_displacements{};
+
+        utility::exhaustive_decode((uint8_t*)*object_base_init_fn, 100, [&](utility::ExhaustionContext& ctx) -> utility::ExhaustionResult {
             if (result != nullptr) {
                 return utility::ExhaustionResult::BREAK;
             }
@@ -55,6 +59,12 @@ FMalloc* FMalloc::get() {
                 return utility::ExhaustionResult::CONTINUE;
             }
 
+            if (seen_displacements.contains(*disp)) {
+                return utility::ExhaustionResult::CONTINUE;
+            }
+
+            seen_displacements.insert(*disp);
+
             if (IsBadReadPtr((void*)*disp, sizeof(void*))) {
                 return utility::ExhaustionResult::CONTINUE;
             }
@@ -86,6 +96,11 @@ FMalloc* FMalloc::get() {
                 uint32_t distance_to_ret = 0;
                 utility::exhaustive_decode((uint8_t*)fn, 100, [&](utility::ExhaustionContext& ctx2) -> utility::ExhaustionResult {
                     ++distance_to_ret;
+
+                    if (ctx2.instrux.BranchInfo.IsBranch && std::string_view{ctx2.instrux.Mnemonic}.starts_with("CALL")) {
+                        return utility::ExhaustionResult::STEP_OVER;
+                    }
+
                     return utility::ExhaustionResult::CONTINUE;
                 });