1 They are looking for control flow exploits. Given program is in source form.
2 AEG's workflow:
Sergey Vartanov, 2007–2020