==== crash1.gft==== The crash causes by the num_bytes variable in the gift_card_reader function. The malloc take directly input from the user without input validating. ==== crash2.gft==== The crash causes by arg1 in animate function. In case 0x02, the arg1 is put directly to regs array. If arg1 is larger than 15. It will cause out of bound ==== hang.gft === The crash causes by case 0x09. The same thing with arg1. If arg1 is = -3, It will make the pc loop forever because at the end pc add 3. Therefore, pc didn’t change anything, so it loops forever.