- Extended prolog patterns: MSVC x64 callee-saves, sub rsp >= 0x20, enter
- Tail-call detection: jmp to prolog candidates seeds new functions
- endbr64/endbr32 CET skipping at function starts
- PE .pdata exception table parsing for precise start/end boundaries
- Data-section function pointer scanning (vtables, callbacks)
- PLT stub detection with is_thunk tag
- end_address and is_thunk fields in Function struct and JSON output
- getDataRanges() and getRuntimeFunctions() in Binary interface
- README docs for all new features + research paper reference
- Add mode field to normal JSON output example
- Add --subs-only output section with JSON sample
- Add --clean output section with stack_offset and xrefs sample
- Add --subs-only --clean combined output section
- Update function count 422 -> 414 (empty function removal)
- Include test example files for all modes