P1: Export parsing now skips forwarded exports (RVA within the export
directory range points to an ASCII forwarder string, not code).
P2: --outline= (with equals but no value) now produces an explicit
error instead of silently consuming the next positional argument.
Layer 2 — PE export auto-outline:
Parses the PE export directory at lifter setup. Every exported function
RVA is added to the inline policy's outline set. Calls to exported
functions are automatically outlined with CreateCall + ABI effects.
Layer 6 — --outline CLI flag:
--outline <addrs> accepts comma-separated hex addresses (e.g.,
--outline 0x140004100,0x140005000). Each address is added to the
inline policy before lifting begins. Supports --outline=<addrs> form.
Multiple --outline flags accumulate.
Verified:
- calc_cout with --outline 0x140004100: lifts x*3+7 with outlined
operator<< call (11 instructions, 1 block, ~2ms)
- VMP 3.8.1: identical a+b+c deobfuscation (14K instructions)
- All baseline, semantic (23/23), micro (15/15) tests pass
- Determinism: 34 golden files match