Modify `havoc` to build up counter-example

This pull request:
* Modifies `havoc` to build up a counter-example that *may* cause error. At the end of execution, we can read off the heap and reconstruct the problematic function causing other components to be blamed.
* Makes `put` var-arg to make it more convenient when debugging interactively.