0day安全软件漏洞分析技术读书笔记-windows2000的堆的工作方式(上)

最新推荐文章于 2022-03-24 14:56:34 发布

houjingyi233

最新推荐文章于 2022-03-24 14:56:34 发布

阅读量1.1k

点赞数 1

分类专栏：桌面安全

本文链接：https://blog.csdn.net/qq_32400847/article/details/53024997

版权

桌面安全专栏收录该内容

9 篇文章 6 订阅

订阅专栏

一.堆和栈的区别

二.堆的数据结构

堆块：出于性能的考虑，堆区的内存按不同大小组织成块，以堆块为单位进行标识，而不是传统的按字节标识。一个堆块包括两个部分，块首和块身。块首是一个堆块头部的几个字节，用来标识这个堆块自身的信息，例如，本块的大小、本块空闲还是占用等信息；块身是紧跟在块首后面的部分，也是最终分配给用户使用的数据区。
堆表：堆表一般位于堆区的起始位置，用于索引堆区中所有堆块的重要信息，包括堆块的位置、堆块的大小、空闲还是占用等。堆表的数据结构决定了整个堆区的组织方式，是快速检索空闲块、保证堆分配效率的关键。堆表在设计时可能会考虑采用平衡二叉树等高级数据结构用于优化查找效率。现代操作系统的堆表往往不止一种数据结构。
在Windows中，占用态的堆块被使用它的程序索引，而堆表只索引所有空闲态的堆块。其中，最重要的堆表有两种：空闲双向链表Freelist(简称空表)和快速单向链表Lookaside(简称快表)。
1.空表
空闲堆块的块首中包含一对重要的指针，这对指针用于将空闲堆块组织成双向链表。按照堆块的大小不同，空表总共被分为128条。空表索引的每一项标识了堆中大小为(索引项x8字节)的空闲堆块。把空闲堆块按照大小的不同链入不同的空表，可以方便堆管理系统高效检索指定大小的空闲堆块。空表索引free[0]所标识的空表很特殊，这条双向链表链入了所有大于等于1024字节的堆块(小于512KB)，这些堆块按照各自的大小在零号空表中升序地依次排列下去。

2.快表
快表是Windows用来加速堆块分配而采用的一种堆表。快表也有128条，组织结构与空表类似，只是其中的堆块按照单链表组织。快表总是被初始化为空，而且每条快表最多只有4个结点，故很快就会被填满。

三.堆的管理策略
1.堆块分配
堆块分配可以分为三类：快表分配、普通空表分配和零号空表(free[0])分配。
(1)从快表中分配堆块比较简单，包括寻找到大小匹配的空闲堆块、将其状态设置为占用态、把它从堆表中卸下、返回一个指向堆块块身的指针给程序使用。
(2)普通空表分配时首先寻找最优的空闲块分配，若失败，则寻找次优的空闲快分配，即最小的能够满足要求的空闲快。
(3)零号空表中按照大小升序链着大小不同的空闲块，故在分配时先从free[0]反向查找最后一个块(表中最大块)，看能否满足要求，如果能满足要求，再正向搜索最小能够满足要求的空闲块进行分配(这就明白为什么零号空表要按照升序排列了)。
堆块分配中的“找零钱”现象：当空表中无法找到匹配的最优堆块时，一个稍大的块会被分配，这种次优分配发生时，会先从大块中按请求的大小精确的割出一块进行分配，然后给剩下的部分重新标注块首，链入空表。由于快表只有在精确匹配时才会分配，故不存在这种现象。
(这里没有讨论堆缓存，低碎片堆和虚分配)
2.堆块释放
释放堆块的操作包括将堆块状态改为空闲，链入相应的堆表。所有的释放块都链入堆表的末尾，分配的时候也先从堆表末尾拿。另外需要强调，快表最多只有4项。
3.堆块合并
经过反复的申请与释放操作，堆区很可能产生很多内存碎片。为了合理有效地利用内存，堆管理系统还要能够进行堆块合并操作。当堆管理系统发现两个空闲块彼此相邻时，就会进行堆块合并，包括将两个块从空闲表中卸下、合并、调整合并后大块的块首信息、将新块重新链入空闲链表。
具体的堆块分配和释放，把内存块按大小分三类：
小块，SIZE<1KB
大块，1KB<=SIZE<=512KB
巨块，SIZE>=512KB
对应的分配和释放算法有三类。

最后，再强调一下Windows堆管理的几个要点。
(1)快表中的空闲块被设置为占用态，故不会发生堆块合并操作。
(2)快表只有精确匹配时才会分配，不存在“搜索次优解”和“找零钱”现象。
(3)快表是单链表，操作比双链表简单，插入删除都少用很多指令。
(4)综上所述，快表很“快”，故在分配和释放时总是优先使用快表，失败时才用空表。
(5)快表只有4项，很容易被填满，因此空表也是频繁使用的。
四、堆分配函数之间的调用关系
所有的堆分配函数最终都将使用位于ntdll.dll中的RtlAllocateHeap()函数进行分配，这个函数也是在用户态能够看到的最底层的堆分配函数。

五、堆的工作方式之空表
这一节通过调试一段简单的程序验证堆的空表的管理策略。下一节验证堆的快表的管理策略。程序中用到的函数在MSDN的说明如下。
HANDLE WINAPI HeapCreate(
_In_ DWORD flOptions,
_In_ SIZE_T dwInitialSize,
_In_ SIZE_T dwMaximumSize
);
函数功能：
创建可由调用进程使用的私有堆对象。该函数保留进程的虚拟地址空间中的空间，并为该块的指定初始部分分配物理存储。
参数说明：
flOptions：堆分配选项。这些选项通过调用堆函数影响对新堆的后续访问。在这里设为0就可以了。
dwInitialSize：堆的初始大小(以字节为单位)。此值确定为堆提交的初始内存量。值将舍入为系统页大小的倍数。该值必须小于dwMaximumSize。如果此参数为0，则函数提交一页。
dwMaximumSize：堆的最大大小(以字节为单位)。 HeapCreate函数将dwMaximumSize四舍五入为系统页大小的倍数，然后在进程的堆的虚拟地址空间中保留该大小的块。如果由HeapAlloc或HeapReAlloc函数发出的分配请求超过dwInitialSize指定的大小，系统将为堆提交额外的内存页，直到堆的最大大小。如果dwMaximumSize不为0，则堆大小是固定的，不能超过最大大小。如果dwMaximumSize为0，则堆的大小可能会增大。堆的大小只受可用内存的限制。需要分配大内存块的应用程序应将dwMaximumSize设置为0。
返回值：
如果函数成功，返回值是新创建的堆的句柄。如果函数失败，返回值为NULL。要获取扩展错误信息，请调用GetLastError。
LPVOID WINAPI HeapAlloc(
_In_ HANDLE hHeap,
_In_ DWORD dwFlags,
_In_ SIZE_T dwBytes
);
函数功能：
从堆中分配一块内存。分配的内存不可移动。
参数说明：
hHeap：将从其分配内存的堆的句柄。此句柄由HeapCreate或GetProcessHeap函数返回。
dwFlags：堆分配选项。指定任何这些值将覆盖使用HeapCreate创建堆时指定的相应值。在这里设为HEAP_ZERO_MEMORY把分配的内存初始化为零就可以了。
dwBytes：要分配的字节数。
返回值：
如果函数成功，返回值是指向分配的内存块的指针。如果函数失败并且尚未指定HEAP_GENERATE_EXCEPTIONS，则返回值为NULL。
BOOL WINAPI HeapFree(
_In_ HANDLE hHeap,
_In_ DWORD dwFlags,
_In_ LPVOID lpMem
);
函数功能：
释放由HeapAlloc或HeapReAlloc函数从堆分配的内存块。
参数说明：
hHeap：要释放其内存块的堆的句柄。此句柄由HeapCreate或GetProcessHeap函数返回。
dwFlags：指定几个可控释放的内存块。在这里设为0就可以了。
lpMem：指向要释放的内存块的指针。此指针由HeapAlloc或HeapReAlloc函数返回。如果此指针为NULL，则行为未定义。
返回值：
如果函数成功，返回值为非零。如果函数失败，返回值为零。应用程序可以调用GetLastError以获取扩展错误信息。

#include <windows.h>
int main()
{
        HLOCAL h1,h2,h3,h4,h5,h6;
        HANDLE hp;
        hp = HeapCreate(0,0x1000,0x10000);
		__asm int 3
        h1 = HeapAlloc(hp,HEAP_ZERO_MEMORY,3);
        h2 = HeapAlloc(hp,HEAP_ZERO_MEMORY,5);
        h3 = HeapAlloc(hp,HEAP_ZERO_MEMORY,6);
        h4 = HeapAlloc(hp,HEAP_ZERO_MEMORY,8);
        h5 = HeapAlloc(hp,HEAP_ZERO_MEMORY,19);
        h6 = HeapAlloc(hp,HEAP_ZERO_MEMORY,24);
        //free block and prevent coaleses
        HeapFree(hp,0,h1); //free to freelist[2] 
        HeapFree(hp,0,h3); //free to freelist[2] 
        HeapFree(hp,0,h5); //free to freelist[4]         
        HeapFree(hp,0,h4); //coalese h3,h4,h5,link the large block to freelist[8]
        return 0;
}

调试堆与调试栈不同，不能直接用调试器加载程序，否则堆管理函数会检测到当前进程处于调试状态，而使用调试态堆管理策略。调试态堆管理策略与常态堆管理策略有很大的不同。为了能够看到真实的堆，在程序中创建堆之后加入一个人工断点，中断程序后再用调试器attach进程。

把OllyDbg设置成默认的调试器，点击取消按钮将自动打开OllyDbg并attach进程。

单击OllyDbg中M按钮，可以得到当前的内存映射状态。HeapCreate成功创建堆区后会把整个堆区的起始地址返回给EAX，在这里是00360000。

观察堆块之前先介绍一下堆块的块首中数据的含义。占用态堆块的结构如图所示。

空闲态堆块和占用态堆块的块首结构基本一致，只是将块首后数据区的前8个字节用于存放空表指针了。这8个字节在变回占用态时将重新分回块身用于存放数据。

堆表中包含的信息依次是段表索引、虚表索引、空表使用标识和空表索引区。
空表索引区：偏移0x178
指向快表的指针：偏移0x584
0x00360178指向0x00360688，而接下来其它的索引都是指向自身。
00360170 00 00 00 00 00 00 00 00 88 06 36 00 88 06 36 00
00360180 80 01 36 00 80 01 36 00 88 01 36 00 88 01 36 00
00360190 90 01 36 00 90 01 36 00 98 01 36 00 98 01 36 00
……
0x00360688指向0x00360178。
00360680 30 01 08 00 00 10 00 00 78 01 36 00 78 01 36 00
根据块首信息表，这个堆块的大小为0x0130，计算单位是8个字节，也就是0x980个字节。

00360000  C8 00 00 00 00 01 00 00 FF EE FF EE 00 10 00 00  ?.....??..
00360010  00 00 00 00 00 FE 00 00 00 00 10 00 00 20 00 00  .....?..... ..
00360020  00 02 00 00 00 20 00 00 30 01 00 00 FF EF FD 7F  .... ..0..稞
00360030  04 00 08 06 00 00 00 00 00 00 00 00 00 00 00 00  .............
00360040  00 00 00 00 98 05 36 00 0F 00 00 00 F8 FF FF FF  ....?6....?
00360050  50 00 36 00 50 00 36 00 40 06 36 00 00 00 00 00  P.6.P.6.@6.....
00360060  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360070  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360080  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360090  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600A0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600B0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600C0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600D0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600E0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360100  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360110  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360120  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360130  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360140  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360150  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360160  00 00 00 00 00 00 00 00 FF FF 00 00 00 00 00 00  ..............
00360170  00 00 00 00 00 00 00 00 88 06 36 00 88 06 36 00  ........?6.?6.
00360180  80 01 36 00 80 01 36 00 88 01 36 00 88 01 36 00  €6.€6.?6.?6.
00360190  90 01 36 00 90 01 36 00 98 01 36 00 98 01 36 00  ?6.?6.?6.?6.
003601A0  A0 01 36 00 A0 01 36 00 A8 01 36 00 A8 01 36 00  ?6.?6.?6.?6.
003601B0  B0 01 36 00 B0 01 36 00 B8 01 36 00 B8 01 36 00  ?6.?6.?6.?6.
003601C0  C0 01 36 00 C0 01 36 00 C8 01 36 00 C8 01 36 00  ?6.?6.?6.?6.
003601D0  D0 01 36 00 D0 01 36 00 D8 01 36 00 D8 01 36 00  ?6.?6.?6.?6.
003601E0  E0 01 36 00 E0 01 36 00 E8 01 36 00 E8 01 36 00  ?6.?6.?6.?6.
003601F0  F0 01 36 00 F0 01 36 00 F8 01 36 00 F8 01 36 00  ?6.?6.?6.?6.
00360200  00 02 36 00 00 02 36 00 08 02 36 00 08 02 36 00  .6..6.6.6.
00360210  10 02 36 00 10 02 36 00 18 02 36 00 18 02 36 00  6.6.6.6.
00360220  20 02 36 00 20 02 36 00 28 02 36 00 28 02 36 00   6. 6.(6.(6.
00360230  30 02 36 00 30 02 36 00 38 02 36 00 38 02 36 00  06.06.86.86.
00360240  40 02 36 00 40 02 36 00 48 02 36 00 48 02 36 00  @6.@6.H6.H6.
00360250  50 02 36 00 50 02 36 00 58 02 36 00 58 02 36 00  P6.P6.X6.X6.
00360260  60 02 36 00 60 02 36 00 68 02 36 00 68 02 36 00  `6.`6.h6.h6.
00360270  70 02 36 00 70 02 36 00 78 02 36 00 78 02 36 00  p6.p6.x6.x6.
00360280  80 02 36 00 80 02 36 00 88 02 36 00 88 02 36 00  €6.€6.?6.?6.
00360290  90 02 36 00 90 02 36 00 98 02 36 00 98 02 36 00  ?6.?6.?6.?6.
003602A0  A0 02 36 00 A0 02 36 00 A8 02 36 00 A8 02 36 00  ?6.?6.?6.?6.
003602B0  B0 02 36 00 B0 02 36 00 B8 02 36 00 B8 02 36 00  ?6.?6.?6.?6.
003602C0  C0 02 36 00 C0 02 36 00 C8 02 36 00 C8 02 36 00  ?6.?6.?6.?6.
003602D0  D0 02 36 00 D0 02 36 00 D8 02 36 00 D8 02 36 00  ?6.?6.?6.?6.
003602E0  E0 02 36 00 E0 02 36 00 E8 02 36 00 E8 02 36 00  ?6.?6.?6.?6.
003602F0  F0 02 36 00 F0 02 36 00 F8 02 36 00 F8 02 36 00  ?6.?6.?6.?6.
00360300  00 03 36 00 00 03 36 00 08 03 36 00 08 03 36 00  .6..6.6.6.
00360310  10 03 36 00 10 03 36 00 18 03 36 00 18 03 36 00  6.6.6.6.
00360320  20 03 36 00 20 03 36 00 28 03 36 00 28 03 36 00   6. 6.(6.(6.
00360330  30 03 36 00 30 03 36 00 38 03 36 00 38 03 36 00  06.06.86.86.
00360340  40 03 36 00 40 03 36 00 48 03 36 00 48 03 36 00  @6.@6.H6.H6.
00360350  50 03 36 00 50 03 36 00 58 03 36 00 58 03 36 00  P6.P6.X6.X6.
00360360  60 03 36 00 60 03 36 00 68 03 36 00 68 03 36 00  `6.`6.h6.h6.
00360370  70 03 36 00 70 03 36 00 78 03 36 00 78 03 36 00  p6.p6.x6.x6.
00360380  80 03 36 00 80 03 36 00 88 03 36 00 88 03 36 00  €6.€6.?6.?6.
00360390  90 03 36 00 90 03 36 00 98 03 36 00 98 03 36 00  ?6.?6.?6.?6.
003603A0  A0 03 36 00 A0 03 36 00 A8 03 36 00 A8 03 36 00  ?6.?6.?6.?6.
003603B0  B0 03 36 00 B0 03 36 00 B8 03 36 00 B8 03 36 00  ?6.?6.?6.?6.
003603C0  C0 03 36 00 C0 03 36 00 C8 03 36 00 C8 03 36 00  ?6.?6.?6.?6.
003603D0  D0 03 36 00 D0 03 36 00 D8 03 36 00 D8 03 36 00  ?6.?6.?6.?6.
003603E0  E0 03 36 00 E0 03 36 00 E8 03 36 00 E8 03 36 00  ?6.?6.?6.?6.
003603F0  F0 03 36 00 F0 03 36 00 F8 03 36 00 F8 03 36 00  ?6.?6.?6.?6.
00360400  00 04 36 00 00 04 36 00 08 04 36 00 08 04 36 00  .6..6.6.6.
00360410  10 04 36 00 10 04 36 00 18 04 36 00 18 04 36 00  6.6.6.6.
00360420  20 04 36 00 20 04 36 00 28 04 36 00 28 04 36 00   6. 6.(6.(6.
00360430  30 04 36 00 30 04 36 00 38 04 36 00 38 04 36 00  06.06.86.86.
00360440  40 04 36 00 40 04 36 00 48 04 36 00 48 04 36 00  @6.@6.H6.H6.
00360450  50 04 36 00 50 04 36 00 58 04 36 00 58 04 36 00  P6.P6.X6.X6.
00360460  60 04 36 00 60 04 36 00 68 04 36 00 68 04 36 00  `6.`6.h6.h6.
00360470  70 04 36 00 70 04 36 00 78 04 36 00 78 04 36 00  p6.p6.x6.x6.
00360480  80 04 36 00 80 04 36 00 88 04 36 00 88 04 36 00  €6.€6.?6.?6.
00360490  90 04 36 00 90 04 36 00 98 04 36 00 98 04 36 00  ?6.?6.?6.?6.
003604A0  A0 04 36 00 A0 04 36 00 A8 04 36 00 A8 04 36 00  ?6.?6.?6.?6.
003604B0  B0 04 36 00 B0 04 36 00 B8 04 36 00 B8 04 36 00  ?6.?6.?6.?6.
003604C0  C0 04 36 00 C0 04 36 00 C8 04 36 00 C8 04 36 00  ?6.?6.?6.?6.
003604D0  D0 04 36 00 D0 04 36 00 D8 04 36 00 D8 04 36 00  ?6.?6.?6.?6.
003604E0  E0 04 36 00 E0 04 36 00 E8 04 36 00 E8 04 36 00  ?6.?6.?6.?6.
003604F0  F0 04 36 00 F0 04 36 00 F8 04 36 00 F8 04 36 00  ?6.?6.?6.?6.
00360500  00 05 36 00 00 05 36 00 08 05 36 00 08 05 36 00  .6..6.6.6.
00360510  10 05 36 00 10 05 36 00 18 05 36 00 18 05 36 00  6.6.6.6.
00360520  20 05 36 00 20 05 36 00 28 05 36 00 28 05 36 00   6. 6.(6.(6.
00360530  30 05 36 00 30 05 36 00 38 05 36 00 38 05 36 00  06.06.86.86.
00360540  40 05 36 00 40 05 36 00 48 05 36 00 48 05 36 00  @6.@6.H6.H6.
00360550  50 05 36 00 50 05 36 00 58 05 36 00 58 05 36 00  P6.P6.X6.X6.
00360560  60 05 36 00 60 05 36 00 68 05 36 00 68 05 36 00  `6.`6.h6.h6.
00360570  70 05 36 00 70 05 36 00 08 06 36 00 00 00 00 00  p6.p6.6.....
00360580  00 00 00 00 00 00 00 00 00 00 00 00 00 10 36 00  .............6.
00360590  00 F0 00 00 00 00 00 00 A8 05 36 00 00 00 00 00  .?.....?6.....
003605A0  00 00 00 00 00 00 00 00 B8 05 36 00 00 00 00 00  ........?6.....
003605B0  00 00 00 00 00 00 00 00 C8 05 36 00 00 00 00 00  ........?6.....
003605C0  00 00 00 00 00 00 00 00 D8 05 36 00 00 00 00 00  ........?6.....
003605D0  00 00 00 00 00 00 00 00 E8 05 36 00 00 00 00 00  ........?6.....
003605E0  00 00 00 00 00 00 00 00 F8 05 36 00 00 00 00 00  ........?6.....
003605F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360600  00 00 00 00 00 00 00 00 40 D6 FC 77 FF FF FF FF  ........@贮w
00360610  00 00 00 00 00 00 00 00 30 00 00 00 00 00 00 00  ........0.......
00360620  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360630  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360640  08 00 C8 00 00 01 00 00 EE FF EE FF 00 00 00 00  .?...??....
00360650  00 00 36 00 00 F0 00 00 00 00 36 00 10 00 00 00  ..6..?...6....
00360660  80 06 36 00 00 00 37 00 0F 00 00 00 01 00 00 00  €6...7.......
00360670  88 05 36 00 00 00 00 00 80 06 36 00 00 00 00 00  ?6.....€6.....
00360680  30 01 08 00 00 10 00 00 78 01 36 00 78 01 36 00  0....x6.x6.
00360690  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606A0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606B0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606C0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606D0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606E0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360700  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

对于堆块的分配我们应该了解以下细节。
1.堆块的大小包括了块首在内，即如果请求32字节，实际会分配的堆块为40字节。
2.堆块的单位是8字节，不足8字节的部分按8字节分配。
3.初始状态下，快表和空表都为空，不存在精确分配。
实际分配情况如图所示。

第一次分配后。

00360000  C8 00 00 00 00 01 00 00 FF EE FF EE 00 10 00 00  ?.....??..
00360010  00 00 00 00 00 FE 00 00 00 00 10 00 00 20 00 00  .....?..... ..
00360020  00 02 00 00 00 20 00 00 2E 01 00 00 FF EF FD 7F  .... .....稞
00360030  04 00 08 06 00 00 00 00 00 00 00 00 00 00 00 00  .............
00360040  00 00 00 00 98 05 36 00 0F 00 00 00 F8 FF FF FF  ....?6....?
00360050  50 00 36 00 50 00 36 00 40 06 36 00 00 00 00 00  P.6.P.6.@6.....
00360060  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360070  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360080  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360090  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600A0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600B0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600C0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600D0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600E0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360100  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360110  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360120  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360130  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360140  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360150  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360160  00 00 00 00 00 00 00 00 FF FF 00 00 00 00 00 00  ..............
00360170  00 00 00 00 00 00 00 00 98 06 36 00 98 06 36 00  ........?6.?6.
00360180  80 01 36 00 80 01 36 00 88 01 36 00 88 01 36 00  €6.€6.?6.?6.
00360190  90 01 36 00 90 01 36 00 98 01 36 00 98 01 36 00  ?6.?6.?6.?6.
003601A0  A0 01 36 00 A0 01 36 00 A8 01 36 00 A8 01 36 00  ?6.?6.?6.?6.
003601B0  B0 01 36 00 B0 01 36 00 B8 01 36 00 B8 01 36 00  ?6.?6.?6.?6.
003601C0  C0 01 36 00 C0 01 36 00 C8 01 36 00 C8 01 36 00  ?6.?6.?6.?6.
003601D0  D0 01 36 00 D0 01 36 00 D8 01 36 00 D8 01 36 00  ?6.?6.?6.?6.
003601E0  E0 01 36 00 E0 01 36 00 E8 01 36 00 E8 01 36 00  ?6.?6.?6.?6.
003601F0  F0 01 36 00 F0 01 36 00 F8 01 36 00 F8 01 36 00  ?6.?6.?6.?6.
00360200  00 02 36 00 00 02 36 00 08 02 36 00 08 02 36 00  .6..6.6.6.
00360210  10 02 36 00 10 02 36 00 18 02 36 00 18 02 36 00  6.6.6.6.
00360220  20 02 36 00 20 02 36 00 28 02 36 00 28 02 36 00   6. 6.(6.(6.
00360230  30 02 36 00 30 02 36 00 38 02 36 00 38 02 36 00  06.06.86.86.
00360240  40 02 36 00 40 02 36 00 48 02 36 00 48 02 36 00  @6.@6.H6.H6.
00360250  50 02 36 00 50 02 36 00 58 02 36 00 58 02 36 00  P6.P6.X6.X6.
00360260  60 02 36 00 60 02 36 00 68 02 36 00 68 02 36 00  `6.`6.h6.h6.
00360270  70 02 36 00 70 02 36 00 78 02 36 00 78 02 36 00  p6.p6.x6.x6.
00360280  80 02 36 00 80 02 36 00 88 02 36 00 88 02 36 00  €6.€6.?6.?6.
00360290  90 02 36 00 90 02 36 00 98 02 36 00 98 02 36 00  ?6.?6.?6.?6.
003602A0  A0 02 36 00 A0 02 36 00 A8 02 36 00 A8 02 36 00  ?6.?6.?6.?6.
003602B0  B0 02 36 00 B0 02 36 00 B8 02 36 00 B8 02 36 00  ?6.?6.?6.?6.
003602C0  C0 02 36 00 C0 02 36 00 C8 02 36 00 C8 02 36 00  ?6.?6.?6.?6.
003602D0  D0 02 36 00 D0 02 36 00 D8 02 36 00 D8 02 36 00  ?6.?6.?6.?6.
003602E0  E0 02 36 00 E0 02 36 00 E8 02 36 00 E8 02 36 00  ?6.?6.?6.?6.
003602F0  F0 02 36 00 F0 02 36 00 F8 02 36 00 F8 02 36 00  ?6.?6.?6.?6.
00360300  00 03 36 00 00 03 36 00 08 03 36 00 08 03 36 00  .6..6.6.6.
00360310  10 03 36 00 10 03 36 00 18 03 36 00 18 03 36 00  6.6.6.6.
00360320  20 03 36 00 20 03 36 00 28 03 36 00 28 03 36 00   6. 6.(6.(6.
00360330  30 03 36 00 30 03 36 00 38 03 36 00 38 03 36 00  06.06.86.86.
00360340  40 03 36 00 40 03 36 00 48 03 36 00 48 03 36 00  @6.@6.H6.H6.
00360350  50 03 36 00 50 03 36 00 58 03 36 00 58 03 36 00  P6.P6.X6.X6.
00360360  60 03 36 00 60 03 36 00 68 03 36 00 68 03 36 00  `6.`6.h6.h6.
00360370  70 03 36 00 70 03 36 00 78 03 36 00 78 03 36 00  p6.p6.x6.x6.
00360380  80 03 36 00 80 03 36 00 88 03 36 00 88 03 36 00  €6.€6.?6.?6.
00360390  90 03 36 00 90 03 36 00 98 03 36 00 98 03 36 00  ?6.?6.?6.?6.
003603A0  A0 03 36 00 A0 03 36 00 A8 03 36 00 A8 03 36 00  ?6.?6.?6.?6.
003603B0  B0 03 36 00 B0 03 36 00 B8 03 36 00 B8 03 36 00  ?6.?6.?6.?6.
003603C0  C0 03 36 00 C0 03 36 00 C8 03 36 00 C8 03 36 00  ?6.?6.?6.?6.
003603D0  D0 03 36 00 D0 03 36 00 D8 03 36 00 D8 03 36 00  ?6.?6.?6.?6.
003603E0  E0 03 36 00 E0 03 36 00 E8 03 36 00 E8 03 36 00  ?6.?6.?6.?6.
003603F0  F0 03 36 00 F0 03 36 00 F8 03 36 00 F8 03 36 00  ?6.?6.?6.?6.
00360400  00 04 36 00 00 04 36 00 08 04 36 00 08 04 36 00  .6..6.6.6.
00360410  10 04 36 00 10 04 36 00 18 04 36 00 18 04 36 00  6.6.6.6.
00360420  20 04 36 00 20 04 36 00 28 04 36 00 28 04 36 00   6. 6.(6.(6.
00360430  30 04 36 00 30 04 36 00 38 04 36 00 38 04 36 00  06.06.86.86.
00360440  40 04 36 00 40 04 36 00 48 04 36 00 48 04 36 00  @6.@6.H6.H6.
00360450  50 04 36 00 50 04 36 00 58 04 36 00 58 04 36 00  P6.P6.X6.X6.
00360460  60 04 36 00 60 04 36 00 68 04 36 00 68 04 36 00  `6.`6.h6.h6.
00360470  70 04 36 00 70 04 36 00 78 04 36 00 78 04 36 00  p6.p6.x6.x6.
00360480  80 04 36 00 80 04 36 00 88 04 36 00 88 04 36 00  €6.€6.?6.?6.
00360490  90 04 36 00 90 04 36 00 98 04 36 00 98 04 36 00  ?6.?6.?6.?6.
003604A0  A0 04 36 00 A0 04 36 00 A8 04 36 00 A8 04 36 00  ?6.?6.?6.?6.
003604B0  B0 04 36 00 B0 04 36 00 B8 04 36 00 B8 04 36 00  ?6.?6.?6.?6.
003604C0  C0 04 36 00 C0 04 36 00 C8 04 36 00 C8 04 36 00  ?6.?6.?6.?6.
003604D0  D0 04 36 00 D0 04 36 00 D8 04 36 00 D8 04 36 00  ?6.?6.?6.?6.
003604E0  E0 04 36 00 E0 04 36 00 E8 04 36 00 E8 04 36 00  ?6.?6.?6.?6.
003604F0  F0 04 36 00 F0 04 36 00 F8 04 36 00 F8 04 36 00  ?6.?6.?6.?6.
00360500  00 05 36 00 00 05 36 00 08 05 36 00 08 05 36 00  .6..6.6.6.
00360510  10 05 36 00 10 05 36 00 18 05 36 00 18 05 36 00  6.6.6.6.
00360520  20 05 36 00 20 05 36 00 28 05 36 00 28 05 36 00   6. 6.(6.(6.
00360530  30 05 36 00 30 05 36 00 38 05 36 00 38 05 36 00  06.06.86.86.
00360540  40 05 36 00 40 05 36 00 48 05 36 00 48 05 36 00  @6.@6.H6.H6.
00360550  50 05 36 00 50 05 36 00 58 05 36 00 58 05 36 00  P6.P6.X6.X6.
00360560  60 05 36 00 60 05 36 00 68 05 36 00 68 05 36 00  `6.`6.h6.h6.
00360570  70 05 36 00 70 05 36 00 08 06 36 00 00 00 00 00  p6.p6.6.....
00360580  00 00 00 00 00 00 00 00 00 00 00 00 00 10 36 00  .............6.
00360590  00 F0 00 00 00 00 00 00 A8 05 36 00 00 00 00 00  .?.....?6.....
003605A0  00 00 00 00 00 00 00 00 B8 05 36 00 00 00 00 00  ........?6.....
003605B0  00 00 00 00 00 00 00 00 C8 05 36 00 00 00 00 00  ........?6.....
003605C0  00 00 00 00 00 00 00 00 D8 05 36 00 00 00 00 00  ........?6.....
003605D0  00 00 00 00 00 00 00 00 E8 05 36 00 00 00 00 00  ........?6.....
003605E0  00 00 00 00 00 00 00 00 F8 05 36 00 00 00 00 00  ........?6.....
003605F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360600  00 00 00 00 00 00 00 00 40 D6 FC 77 FF FF FF FF  ........@贮w
00360610  00 00 00 00 00 00 00 00 30 00 00 00 00 00 00 00  ........0.......
00360620  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360630  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360640  08 00 C8 00 00 01 00 00 EE FF EE FF 00 00 00 00  .?...??....
00360650  00 00 36 00 00 F0 00 00 00 00 36 00 10 00 00 00  ..6..?...6....
00360660  80 06 36 00 00 00 37 00 0F 00 00 00 01 00 00 00  €6...7.......
00360670  88 05 36 00 00 00 00 00 90 06 36 00 00 00 00 00  ?6.....?6.....
00360680  02 00 08 00 00 01 0D 00 00 00 00 00 78 01 36 00  .........x6.
00360690  2E 01 02 00 00 10 00 00 78 01 36 00 78 01 36 00  .....x6.x6.
003606A0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606B0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606C0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606D0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606E0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360700  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

现在：00360020 00 02 00 00 00 20 00 00 2E 01 00 00 FF EF FD 7F
原来：00360020 00 02 00 00 00 20 00 00 30 01 00 00 FF EF FD 7F
内存0x00360028处的0x00000130变成了0x0000012E，减小了2个堆单位，这个数字的意思就是尾块还有多少可以分配的空间。
现在：00360170 00 00 00 00 00 00 00 00 98 06 36 00 98 06 36 00
原来：00360170 00 00 00 00 00 00 00 00 88 06 36 00 88 06 36 00
0x00360178指向的是尾块，现在0x00360178处的指针变成了0x00360698，也就是说现在尾块的起始位置是0x00360690。
现在：
00360670 88 05 36 00 00 00 00 00 90 06 36 00 00 00 00 00
00360680 02 00 08 00 00 01 0D 00 00 00 00 00 78 01 36 00
00360690 2E 01 02 00 00 10 00 00 78 01 36 00 78 01 36 00
原来：
00360670 88 05 36 00 00 00 00 00 80 06 36 00 00 00 00 00
00360680 30 01 08 00 00 10 00 00 78 01 36 00 78 01 36 00
00360690 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
分配第一次后0x00360680的值，也就是刚分配的空间，前面8字节是块首，0x0002表示两个堆单位。尾块块首的前两个字节是代表堆块的大小，所以0x012E的确是现在未分配堆块的大小，和前面的数据是匹配的。
第二次分配后。

00360000  C8 00 00 00 00 01 00 00 FF EE FF EE 00 10 00 00  ?.....??..
00360010  00 00 00 00 00 FE 00 00 00 00 10 00 00 20 00 00  .....?..... ..
00360020  00 02 00 00 00 20 00 00 2C 01 00 00 FF EF FD 7F  .... ..,..稞
00360030  04 00 08 06 00 00 00 00 00 00 00 00 00 00 00 00  .............
00360040  00 00 00 00 98 05 36 00 0F 00 00 00 F8 FF FF FF  ....?6....?
00360050  50 00 36 00 50 00 36 00 40 06 36 00 00 00 00 00  P.6.P.6.@6.....
00360060  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360070  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360080  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360090  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600A0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600B0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600C0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600D0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600E0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360100  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360110  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360120  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360130  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360140  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360150  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360160  00 00 00 00 00 00 00 00 FF FF 00 00 00 00 00 00  ..............
00360170  00 00 00 00 00 00 00 00 A8 06 36 00 A8 06 36 00  ........?6.?6.
00360180  80 01 36 00 80 01 36 00 88 01 36 00 88 01 36 00  €6.€6.?6.?6.
00360190  90 01 36 00 90 01 36 00 98 01 36 00 98 01 36 00  ?6.?6.?6.?6.
003601A0  A0 01 36 00 A0 01 36 00 A8 01 36 00 A8 01 36 00  ?6.?6.?6.?6.
003601B0  B0 01 36 00 B0 01 36 00 B8 01 36 00 B8 01 36 00  ?6.?6.?6.?6.
003601C0  C0 01 36 00 C0 01 36 00 C8 01 36 00 C8 01 36 00  ?6.?6.?6.?6.
003601D0  D0 01 36 00 D0 01 36 00 D8 01 36 00 D8 01 36 00  ?6.?6.?6.?6.
003601E0  E0 01 36 00 E0 01 36 00 E8 01 36 00 E8 01 36 00  ?6.?6.?6.?6.
003601F0  F0 01 36 00 F0 01 36 00 F8 01 36 00 F8 01 36 00  ?6.?6.?6.?6.
00360200  00 02 36 00 00 02 36 00 08 02 36 00 08 02 36 00  .6..6.6.6.
00360210  10 02 36 00 10 02 36 00 18 02 36 00 18 02 36 00  6.6.6.6.
00360220  20 02 36 00 20 02 36 00 28 02 36 00 28 02 36 00   6. 6.(6.(6.
00360230  30 02 36 00 30 02 36 00 38 02 36 00 38 02 36 00  06.06.86.86.
00360240  40 02 36 00 40 02 36 00 48 02 36 00 48 02 36 00  @6.@6.H6.H6.
00360250  50 02 36 00 50 02 36 00 58 02 36 00 58 02 36 00  P6.P6.X6.X6.
00360260  60 02 36 00 60 02 36 00 68 02 36 00 68 02 36 00  `6.`6.h6.h6.
00360270  70 02 36 00 70 02 36 00 78 02 36 00 78 02 36 00  p6.p6.x6.x6.
00360280  80 02 36 00 80 02 36 00 88 02 36 00 88 02 36 00  €6.€6.?6.?6.
00360290  90 02 36 00 90 02 36 00 98 02 36 00 98 02 36 00  ?6.?6.?6.?6.
003602A0  A0 02 36 00 A0 02 36 00 A8 02 36 00 A8 02 36 00  ?6.?6.?6.?6.
003602B0  B0 02 36 00 B0 02 36 00 B8 02 36 00 B8 02 36 00  ?6.?6.?6.?6.
003602C0  C0 02 36 00 C0 02 36 00 C8 02 36 00 C8 02 36 00  ?6.?6.?6.?6.
003602D0  D0 02 36 00 D0 02 36 00 D8 02 36 00 D8 02 36 00  ?6.?6.?6.?6.
003602E0  E0 02 36 00 E0 02 36 00 E8 02 36 00 E8 02 36 00  ?6.?6.?6.?6.
003602F0  F0 02 36 00 F0 02 36 00 F8 02 36 00 F8 02 36 00  ?6.?6.?6.?6.
00360300  00 03 36 00 00 03 36 00 08 03 36 00 08 03 36 00  .6..6.6.6.
00360310  10 03 36 00 10 03 36 00 18 03 36 00 18 03 36 00  6.6.6.6.
00360320  20 03 36 00 20 03 36 00 28 03 36 00 28 03 36 00   6. 6.(6.(6.
00360330  30 03 36 00 30 03 36 00 38 03 36 00 38 03 36 00  06.06.86.86.
00360340  40 03 36 00 40 03 36 00 48 03 36 00 48 03 36 00  @6.@6.H6.H6.
00360350  50 03 36 00 50 03 36 00 58 03 36 00 58 03 36 00  P6.P6.X6.X6.
00360360  60 03 36 00 60 03 36 00 68 03 36 00 68 03 36 00  `6.`6.h6.h6.
00360370  70 03 36 00 70 03 36 00 78 03 36 00 78 03 36 00  p6.p6.x6.x6.
00360380  80 03 36 00 80 03 36 00 88 03 36 00 88 03 36 00  €6.€6.?6.?6.
00360390  90 03 36 00 90 03 36 00 98 03 36 00 98 03 36 00  ?6.?6.?6.?6.
003603A0  A0 03 36 00 A0 03 36 00 A8 03 36 00 A8 03 36 00  ?6.?6.?6.?6.
003603B0  B0 03 36 00 B0 03 36 00 B8 03 36 00 B8 03 36 00  ?6.?6.?6.?6.
003603C0  C0 03 36 00 C0 03 36 00 C8 03 36 00 C8 03 36 00  ?6.?6.?6.?6.
003603D0  D0 03 36 00 D0 03 36 00 D8 03 36 00 D8 03 36 00  ?6.?6.?6.?6.
003603E0  E0 03 36 00 E0 03 36 00 E8 03 36 00 E8 03 36 00  ?6.?6.?6.?6.
003603F0  F0 03 36 00 F0 03 36 00 F8 03 36 00 F8 03 36 00  ?6.?6.?6.?6.
00360400  00 04 36 00 00 04 36 00 08 04 36 00 08 04 36 00  .6..6.6.6.
00360410  10 04 36 00 10 04 36 00 18 04 36 00 18 04 36 00  6.6.6.6.
00360420  20 04 36 00 20 04 36 00 28 04 36 00 28 04 36 00   6. 6.(6.(6.
00360430  30 04 36 00 30 04 36 00 38 04 36 00 38 04 36 00  06.06.86.86.
00360440  40 04 36 00 40 04 36 00 48 04 36 00 48 04 36 00  @6.@6.H6.H6.
00360450  50 04 36 00 50 04 36 00 58 04 36 00 58 04 36 00  P6.P6.X6.X6.
00360460  60 04 36 00 60 04 36 00 68 04 36 00 68 04 36 00  `6.`6.h6.h6.
00360470  70 04 36 00 70 04 36 00 78 04 36 00 78 04 36 00  p6.p6.x6.x6.
00360480  80 04 36 00 80 04 36 00 88 04 36 00 88 04 36 00  €6.€6.?6.?6.
00360490  90 04 36 00 90 04 36 00 98 04 36 00 98 04 36 00  ?6.?6.?6.?6.
003604A0  A0 04 36 00 A0 04 36 00 A8 04 36 00 A8 04 36 00  ?6.?6.?6.?6.
003604B0  B0 04 36 00 B0 04 36 00 B8 04 36 00 B8 04 36 00  ?6.?6.?6.?6.
003604C0  C0 04 36 00 C0 04 36 00 C8 04 36 00 C8 04 36 00  ?6.?6.?6.?6.
003604D0  D0 04 36 00 D0 04 36 00 D8 04 36 00 D8 04 36 00  ?6.?6.?6.?6.
003604E0  E0 04 36 00 E0 04 36 00 E8 04 36 00 E8 04 36 00  ?6.?6.?6.?6.
003604F0  F0 04 36 00 F0 04 36 00 F8 04 36 00 F8 04 36 00  ?6.?6.?6.?6.
00360500  00 05 36 00 00 05 36 00 08 05 36 00 08 05 36 00  .6..6.6.6.
00360510  10 05 36 00 10 05 36 00 18 05 36 00 18 05 36 00  6.6.6.6.
00360520  20 05 36 00 20 05 36 00 28 05 36 00 28 05 36 00   6. 6.(6.(6.
00360530  30 05 36 00 30 05 36 00 38 05 36 00 38 05 36 00  06.06.86.86.
00360540  40 05 36 00 40 05 36 00 48 05 36 00 48 05 36 00  @6.@6.H6.H6.
00360550  50 05 36 00 50 05 36 00 58 05 36 00 58 05 36 00  P6.P6.X6.X6.
00360560  60 05 36 00 60 05 36 00 68 05 36 00 68 05 36 00  `6.`6.h6.h6.
00360570  70 05 36 00 70 05 36 00 08 06 36 00 00 00 00 00  p6.p6.6.....
00360580  00 00 00 00 00 00 00 00 00 00 00 00 00 10 36 00  .............6.
00360590  00 F0 00 00 00 00 00 00 A8 05 36 00 00 00 00 00  .?.....?6.....
003605A0  00 00 00 00 00 00 00 00 B8 05 36 00 00 00 00 00  ........?6.....
003605B0  00 00 00 00 00 00 00 00 C8 05 36 00 00 00 00 00  ........?6.....
003605C0  00 00 00 00 00 00 00 00 D8 05 36 00 00 00 00 00  ........?6.....
003605D0  00 00 00 00 00 00 00 00 E8 05 36 00 00 00 00 00  ........?6.....
003605E0  00 00 00 00 00 00 00 00 F8 05 36 00 00 00 00 00  ........?6.....
003605F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360600  00 00 00 00 00 00 00 00 40 D6 FC 77 FF FF FF FF  ........@贮w
00360610  00 00 00 00 00 00 00 00 30 00 00 00 00 00 00 00  ........0.......
00360620  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360630  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360640  08 00 C8 00 00 01 00 00 EE FF EE FF 00 00 00 00  .?...??....
00360650  00 00 36 00 00 F0 00 00 00 00 36 00 10 00 00 00  ..6..?...6....
00360660  80 06 36 00 00 00 37 00 0F 00 00 00 01 00 00 00  €6...7.......
00360670  88 05 36 00 00 00 00 00 A0 06 36 00 00 00 00 00  ?6.....?6.....
00360680  02 00 08 00 00 01 0D 00 00 00 00 00 78 01 36 00  .........x6.
00360690  02 00 02 00 00 01 0B 00 00 00 00 00 00 01 36 00  .........6.
003606A0  2C 01 02 00 00 10 00 00 78 01 36 00 78 01 36 00  ,....x6.x6.
003606B0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606C0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606D0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606E0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360700  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

现在：00360020 00 02 00 00 00 20 00 00 2C 01 00 00 FF EF FD 7F
原来：00360020 00 02 00 00 00 20 00 00 2E 01 00 00 FF EF FD 7F
现在：00360170 00 00 00 00 00 00 00 00 A8 06 36 00 A8 06 36 00
原来：00360170 00 00 00 00 00 00 00 00 98 06 36 00 98 06 36 00
现在：
00360670 88 05 36 00 00 00 00 00 A0 06 36 00 00 00 00 00
00360680 02 00 08 00 00 01 0D 00 00 00 00 00 78 01 36 00
00360690 02 00 02 00 00 01 0B 00 00 00 00 00 00 01 36 00
003606A0 2C 01 02 00 00 10 00 00 78 01 36 00 78 01 36 00
原来：
00360670 88 05 36 00 00 00 00 00 90 06 36 00 00 00 00 00
00360680 02 00 08 00 00 01 0D 00 00 00 00 00 78 01 36 00
00360690 2E 01 02 00 00 10 00 00 78 01 36 00 78 01 36 00
003606A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00360690和00360680除了块首有所不同以外，数据区有一位也变成了0，因为我们要求的是5个字节初始化为0，而上一次的3个字节本来就是0。
第三次分配后。

00360000   C8 00 00 00 00 01 00 00 FF EE FF EE 00 10 00 00  ?.....�??..
00360010   00 00 00 00 00 FE 00 00 00 00 10 00 00 20 00 00  .....?..... ..
00360020   00 02 00 00 00 20 00 00 2A 01 00 00 FF EF FD 7F  .... ..*..���
00360030   04 00 08 06 00 00 00 00 00 00 00 00 00 00 00 00  .............
00360040   00 00 00 00 98 05 36 00 0F 00 00 00 F8 FF FF FF  ....?6....?��
00360050   50 00 36 00 50 00 36 00 40 06 36 00 00 00 00 00  P.6.P.6.@6.....
00360060   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360070   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360080   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360090   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600A0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600B0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600C0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600D0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600E0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360100   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360110   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360120   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360130   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360140   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360150   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360160   00 00 00 00 00 00 00 00 FF FF 00 00 00 00 00 00  ........��......
00360170   00 00 00 00 00 00 00 00 B8 06 36 00 B8 06 36 00  ........?6.?6.
00360180   80 01 36 00 80 01 36 00 88 01 36 00 88 01 36 00  �6.�6.?6.?6.
00360190   90 01 36 00 90 01 36 00 98 01 36 00 98 01 36 00  ?6.?6.?6.?6.
003601A0   A0 01 36 00 A0 01 36 00 A8 01 36 00 A8 01 36 00  ?6.?6.?6.?6.
003601B0   B0 01 36 00 B0 01 36 00 B8 01 36 00 B8 01 36 00  ?6.?6.?6.?6.
003601C0   C0 01 36 00 C0 01 36 00 C8 01 36 00 C8 01 36 00  ?6.?6.?6.?6.
003601D0   D0 01 36 00 D0 01 36 00 D8 01 36 00 D8 01 36 00  ?6.?6.?6.?6.
003601E0   E0 01 36 00 E0 01 36 00 E8 01 36 00 E8 01 36 00  ?6.?6.?6.?6.
003601F0   F0 01 36 00 F0 01 36 00 F8 01 36 00 F8 01 36 00  ?6.?6.?6.?6.
00360200   00 02 36 00 00 02 36 00 08 02 36 00 08 02 36 00  .6..6.6.6.
00360210   10 02 36 00 10 02 36 00 18 02 36 00 18 02 36 00  6.6.6.6.
00360220   20 02 36 00 20 02 36 00 28 02 36 00 28 02 36 00   6. 6.(6.(6.
00360230   30 02 36 00 30 02 36 00 38 02 36 00 38 02 36 00  06.06.86.86.
00360240   40 02 36 00 40 02 36 00 48 02 36 00 48 02 36 00  @6.@6.H6.H6.
00360250   50 02 36 00 50 02 36 00 58 02 36 00 58 02 36 00  P6.P6.X6.X6.
00360260   60 02 36 00 60 02 36 00 68 02 36 00 68 02 36 00  `6.`6.h6.h6.
00360270   70 02 36 00 70 02 36 00 78 02 36 00 78 02 36 00  p6.p6.x6.x6.
00360280   80 02 36 00 80 02 36 00 88 02 36 00 88 02 36 00  �6.�6.?6.?6.
00360290   90 02 36 00 90 02 36 00 98 02 36 00 98 02 36 00  ?6.?6.?6.?6.
003602A0   A0 02 36 00 A0 02 36 00 A8 02 36 00 A8 02 36 00  ?6.?6.?6.?6.
003602B0   B0 02 36 00 B0 02 36 00 B8 02 36 00 B8 02 36 00  ?6.?6.?6.?6.
003602C0   C0 02 36 00 C0 02 36 00 C8 02 36 00 C8 02 36 00  ?6.?6.?6.?6.
003602D0   D0 02 36 00 D0 02 36 00 D8 02 36 00 D8 02 36 00  ?6.?6.?6.?6.
003602E0   E0 02 36 00 E0 02 36 00 E8 02 36 00 E8 02 36 00  ?6.?6.?6.?6.
003602F0   F0 02 36 00 F0 02 36 00 F8 02 36 00 F8 02 36 00  ?6.?6.?6.?6.
00360300   00 03 36 00 00 03 36 00 08 03 36 00 08 03 36 00  .6..6.6.6.
00360310   10 03 36 00 10 03 36 00 18 03 36 00 18 03 36 00  6.6.6.6.
00360320   20 03 36 00 20 03 36 00 28 03 36 00 28 03 36 00   6. 6.(6.(6.
00360330   30 03 36 00 30 03 36 00 38 03 36 00 38 03 36 00  06.06.86.86.
00360340   40 03 36 00 40 03 36 00 48 03 36 00 48 03 36 00  @6.@6.H6.H6.
00360350   50 03 36 00 50 03 36 00 58 03 36 00 58 03 36 00  P6.P6.X6.X6.
00360360   60 03 36 00 60 03 36 00 68 03 36 00 68 03 36 00  `6.`6.h6.h6.
00360370   70 03 36 00 70 03 36 00 78 03 36 00 78 03 36 00  p6.p6.x6.x6.
00360380   80 03 36 00 80 03 36 00 88 03 36 00 88 03 36 00  �6.�6.?6.?6.
00360390   90 03 36 00 90 03 36 00 98 03 36 00 98 03 36 00  ?6.?6.?6.?6.
003603A0   A0 03 36 00 A0 03 36 00 A8 03 36 00 A8 03 36 00  ?6.?6.?6.?6.
003603B0   B0 03 36 00 B0 03 36 00 B8 03 36 00 B8 03 36 00  ?6.?6.?6.?6.
003603C0   C0 03 36 00 C0 03 36 00 C8 03 36 00 C8 03 36 00  ?6.?6.?6.?6.
003603D0   D0 03 36 00 D0 03 36 00 D8 03 36 00 D8 03 36 00  ?6.?6.?6.?6.
003603E0   E0 03 36 00 E0 03 36 00 E8 03 36 00 E8 03 36 00  ?6.?6.?6.?6.
003603F0   F0 03 36 00 F0 03 36 00 F8 03 36 00 F8 03 36 00  ?6.?6.?6.?6.
00360400   00 04 36 00 00 04 36 00 08 04 36 00 08 04 36 00  .6..6.6.6.
00360410   10 04 36 00 10 04 36 00 18 04 36 00 18 04 36 00  6.6.6.6.
00360420   20 04 36 00 20 04 36 00 28 04 36 00 28 04 36 00   6. 6.(6.(6.
00360430   30 04 36 00 30 04 36 00 38 04 36 00 38 04 36 00  06.06.86.86.
00360440   40 04 36 00 40 04 36 00 48 04 36 00 48 04 36 00  @6.@6.H6.H6.
00360450   50 04 36 00 50 04 36 00 58 04 36 00 58 04 36 00  P6.P6.X6.X6.
00360460   60 04 36 00 60 04 36 00 68 04 36 00 68 04 36 00  `6.`6.h6.h6.
00360470   70 04 36 00 70 04 36 00 78 04 36 00 78 04 36 00  p6.p6.x6.x6.
00360480   80 04 36 00 80 04 36 00 88 04 36 00 88 04 36 00  �6.�6.?6.?6.
00360490   90 04 36 00 90 04 36 00 98 04 36 00 98 04 36 00  ?6.?6.?6.?6.
003604A0   A0 04 36 00 A0 04 36 00 A8 04 36 00 A8 04 36 00  ?6.?6.?6.?6.
003604B0   B0 04 36 00 B0 04 36 00 B8 04 36 00 B8 04 36 00  ?6.?6.?6.?6.
003604C0   C0 04 36 00 C0 04 36 00 C8 04 36 00 C8 04 36 00  ?6.?6.?6.?6.
003604D0   D0 04 36 00 D0 04 36 00 D8 04 36 00 D8 04 36 00  ?6.?6.?6.?6.
003604E0   E0 04 36 00 E0 04 36 00 E8 04 36 00 E8 04 36 00  ?6.?6.?6.?6.
003604F0   F0 04 36 00 F0 04 36 00 F8 04 36 00 F8 04 36 00  ?6.?6.?6.?6.
00360500   00 05 36 00 00 05 36 00 08 05 36 00 08 05 36 00  .6..6.6.6.
00360510   10 05 36 00 10 05 36 00 18 05 36 00 18 05 36 00  6.6.6.6.
00360520   20 05 36 00 20 05 36 00 28 05 36 00 28 05 36 00   6. 6.(6.(6.
00360530   30 05 36 00 30 05 36 00 38 05 36 00 38 05 36 00  06.06.86.86.
00360540   40 05 36 00 40 05 36 00 48 05 36 00 48 05 36 00  @6.@6.H6.H6.
00360550   50 05 36 00 50 05 36 00 58 05 36 00 58 05 36 00  P6.P6.X6.X6.
00360560   60 05 36 00 60 05 36 00 68 05 36 00 68 05 36 00  `6.`6.h6.h6.
00360570   70 05 36 00 70 05 36 00 08 06 36 00 00 00 00 00  p6.p6.6.....
00360580   00 00 00 00 00 00 00 00 00 00 00 00 00 10 36 00  .............6.
00360590   00 F0 00 00 00 00 00 00 A8 05 36 00 00 00 00 00  .?.....?6.....
003605A0   00 00 00 00 00 00 00 00 B8 05 36 00 00 00 00 00  ........?6.....
003605B0   00 00 00 00 00 00 00 00 C8 05 36 00 00 00 00 00  ........?6.....
003605C0   00 00 00 00 00 00 00 00 D8 05 36 00 00 00 00 00  ........?6.....
003605D0   00 00 00 00 00 00 00 00 E8 05 36 00 00 00 00 00  ........?6.....
003605E0   00 00 00 00 00 00 00 00 F8 05 36 00 00 00 00 00  ........?6.....
003605F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360600   00 00 00 00 00 00 00 00 40 D6 FC 77 FF FF FF FF  ........@��w����
00360610   00 00 00 00 00 00 00 00 30 00 00 00 00 00 00 00  ........0.......
00360620   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360630   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360640   08 00 C8 00 00 01 00 00 EE FF EE FF 00 00 00 00  .?...??....
00360650   00 00 36 00 00 F0 00 00 00 00 36 00 10 00 00 00  ..6..?...6....
00360660   80 06 36 00 00 00 37 00 0F 00 00 00 01 00 00 00  �6...7.......
00360670   88 05 36 00 00 00 00 00 B0 06 36 00 00 00 00 00  ?6.....?6.....
00360680   02 00 08 00 00 01 0D 00 00 00 00 00 78 01 36 00  .........x6.
00360690   02 00 02 00 00 01 0B 00 00 00 00 00 00 01 36 00  .........6.
003606A0   02 00 02 00 00 01 0A 00 00 00 00 00 00 00 36 00  ...........6.
003606B0   2A 01 02 00 00 10 00 00 78 01 36 00 78 01 36 00  *....x6.x6.
003606C0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606D0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606E0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360700   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ..

现在：00360020 00 02 00 00 00 20 00 00 2A 01 00 00 FF EF FD 7F
原来：00360020 00 02 00 00 00 20 00 00 2C 01 00 00 FF EF FD 7F
现在：00360170 00 00 00 00 00 00 00 00 B8 06 36 00 B8 06 36 00
原来：00360170 00 00 00 00 00 00 00 00 A8 06 36 00 A8 06 36 00
现在：
00360670 88 05 36 00 00 00 00 00 B0 06 36 00 00 00 00 00
00360680 02 00 08 00 00 01 0D 00 00 00 00 00 78 01 36 00
00360690 02 00 02 00 00 01 0B 00 00 00 00 00 00 01 36 00
003606A0 02 00 02 00 00 01 0A 00 00 00 00 00 00 00 36 00
003606B0 2A 01 02 00 00 10 00 00 78 01 36 00 78 01 36 00
原来：
00360670 88 05 36 00 00 00 00 00 A0 06 36 00 00 00 00 00
00360680 02 00 08 00 00 01 0D 00 00 00 00 00 78 01 36 00
00360690 02 00 02 00 00 01 0B 00 00 00 00 00 00 01 36 00
003606A0 2C 01 02 00 00 10 00 00 78 01 36 00 78 01 36 00
003606B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
第四次分配后。

00360000   C8 00 00 00 00 01 00 00 FF EE FF EE 00 10 00 00  ?.....�??..
00360010   00 00 00 00 00 FE 00 00 00 00 10 00 00 20 00 00  .....?..... ..
00360020   00 02 00 00 00 20 00 00 28 01 00 00 FF EF FD 7F  .... ..(..���
00360030   04 00 08 06 00 00 00 00 00 00 00 00 00 00 00 00  .............
00360040   00 00 00 00 98 05 36 00 0F 00 00 00 F8 FF FF FF  ....?6....?��
00360050   50 00 36 00 50 00 36 00 40 06 36 00 00 00 00 00  P.6.P.6.@6.....
00360060   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360070   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360080   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360090   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600A0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600B0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600C0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600D0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600E0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360100   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360110   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360120   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360130   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360140   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360150   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360160   00 00 00 00 00 00 00 00 FF FF 00 00 00 00 00 00  ........��......
00360170   00 00 00 00 00 00 00 00 C8 06 36 00 C8 06 36 00  ........?6.?6.
00360180   80 01 36 00 80 01 36 00 88 01 36 00 88 01 36 00  �6.�6.?6.?6.
00360190   90 01 36 00 90 01 36 00 98 01 36 00 98 01 36 00  ?6.?6.?6.?6.
003601A0   A0 01 36 00 A0 01 36 00 A8 01 36 00 A8 01 36 00  ?6.?6.?6.?6.
003601B0   B0 01 36 00 B0 01 36 00 B8 01 36 00 B8 01 36 00  ?6.?6.?6.?6.
003601C0   C0 01 36 00 C0 01 36 00 C8 01 36 00 C8 01 36 00  ?6.?6.?6.?6.
003601D0   D0 01 36 00 D0 01 36 00 D8 01 36 00 D8 01 36 00  ?6.?6.?6.?6.
003601E0   E0 01 36 00 E0 01 36 00 E8 01 36 00 E8 01 36 00  ?6.?6.?6.?6.
003601F0   F0 01 36 00 F0 01 36 00 F8 01 36 00 F8 01 36 00  ?6.?6.?6.?6.
00360200   00 02 36 00 00 02 36 00 08 02 36 00 08 02 36 00  .6..6.6.6.
00360210   10 02 36 00 10 02 36 00 18 02 36 00 18 02 36 00  6.6.6.6.
00360220   20 02 36 00 20 02 36 00 28 02 36 00 28 02 36 00   6. 6.(6.(6.
00360230   30 02 36 00 30 02 36 00 38 02 36 00 38 02 36 00  06.06.86.86.
00360240   40 02 36 00 40 02 36 00 48 02 36 00 48 02 36 00  @6.@6.H6.H6.
00360250   50 02 36 00 50 02 36 00 58 02 36 00 58 02 36 00  P6.P6.X6.X6.
00360260   60 02 36 00 60 02 36 00 68 02 36 00 68 02 36 00  `6.`6.h6.h6.
00360270   70 02 36 00 70 02 36 00 78 02 36 00 78 02 36 00  p6.p6.x6.x6.
00360280   80 02 36 00 80 02 36 00 88 02 36 00 88 02 36 00  �6.�6.?6.?6.
00360290   90 02 36 00 90 02 36 00 98 02 36 00 98 02 36 00  ?6.?6.?6.?6.
003602A0   A0 02 36 00 A0 02 36 00 A8 02 36 00 A8 02 36 00  ?6.?6.?6.?6.
003602B0   B0 02 36 00 B0 02 36 00 B8 02 36 00 B8 02 36 00  ?6.?6.?6.?6.
003602C0   C0 02 36 00 C0 02 36 00 C8 02 36 00 C8 02 36 00  ?6.?6.?6.?6.
003602D0   D0 02 36 00 D0 02 36 00 D8 02 36 00 D8 02 36 00  ?6.?6.?6.?6.
003602E0   E0 02 36 00 E0 02 36 00 E8 02 36 00 E8 02 36 00  ?6.?6.?6.?6.
003602F0   F0 02 36 00 F0 02 36 00 F8 02 36 00 F8 02 36 00  ?6.?6.?6.?6.
00360300   00 03 36 00 00 03 36 00 08 03 36 00 08 03 36 00  .6..6.6.6.
00360310   10 03 36 00 10 03 36 00 18 03 36 00 18 03 36 00  6.6.6.6.
00360320   20 03 36 00 20 03 36 00 28 03 36 00 28 03 36 00   6. 6.(6.(6.
00360330   30 03 36 00 30 03 36 00 38 03 36 00 38 03 36 00  06.06.86.86.
00360340   40 03 36 00 40 03 36 00 48 03 36 00 48 03 36 00  @6.@6.H6.H6.
00360350   50 03 36 00 50 03 36 00 58 03 36 00 58 03 36 00  P6.P6.X6.X6.
00360360   60 03 36 00 60 03 36 00 68 03 36 00 68 03 36 00  `6.`6.h6.h6.
00360370   70 03 36 00 70 03 36 00 78 03 36 00 78 03 36 00  p6.p6.x6.x6.
00360380   80 03 36 00 80 03 36 00 88 03 36 00 88 03 36 00  �6.�6.?6.?6.
00360390   90 03 36 00 90 03 36 00 98 03 36 00 98 03 36 00  ?6.?6.?6.?6.
003603A0   A0 03 36 00 A0 03 36 00 A8 03 36 00 A8 03 36 00  ?6.?6.?6.?6.
003603B0   B0 03 36 00 B0 03 36 00 B8 03 36 00 B8 03 36 00  ?6.?6.?6.?6.
003603C0   C0 03 36 00 C0 03 36 00 C8 03 36 00 C8 03 36 00  ?6.?6.?6.?6.
003603D0   D0 03 36 00 D0 03 36 00 D8 03 36 00 D8 03 36 00  ?6.?6.?6.?6.
003603E0   E0 03 36 00 E0 03 36 00 E8 03 36 00 E8 03 36 00  ?6.?6.?6.?6.
003603F0   F0 03 36 00 F0 03 36 00 F8 03 36 00 F8 03 36 00  ?6.?6.?6.?6.
00360400   00 04 36 00 00 04 36 00 08 04 36 00 08 04 36 00  .6..6.6.6.
00360410   10 04 36 00 10 04 36 00 18 04 36 00 18 04 36 00  6.6.6.6.
00360420   20 04 36 00 20 04 36 00 28 04 36 00 28 04 36 00   6. 6.(6.(6.
00360430   30 04 36 00 30 04 36 00 38 04 36 00 38 04 36 00  06.06.86.86.
00360440   40 04 36 00 40 04 36 00 48 04 36 00 48 04 36 00  @6.@6.H6.H6.
00360450   50 04 36 00 50 04 36 00 58 04 36 00 58 04 36 00  P6.P6.X6.X6.
00360460   60 04 36 00 60 04 36 00 68 04 36 00 68 04 36 00  `6.`6.h6.h6.
00360470   70 04 36 00 70 04 36 00 78 04 36 00 78 04 36 00  p6.p6.x6.x6.
00360480   80 04 36 00 80 04 36 00 88 04 36 00 88 04 36 00  �6.�6.?6.?6.
00360490   90 04 36 00 90 04 36 00 98 04 36 00 98 04 36 00  ?6.?6.?6.?6.
003604A0   A0 04 36 00 A0 04 36 00 A8 04 36 00 A8 04 36 00  ?6.?6.?6.?6.
003604B0   B0 04 36 00 B0 04 36 00 B8 04 36 00 B8 04 36 00  ?6.?6.?6.?6.
003604C0   C0 04 36 00 C0 04 36 00 C8 04 36 00 C8 04 36 00  ?6.?6.?6.?6.
003604D0   D0 04 36 00 D0 04 36 00 D8 04 36 00 D8 04 36 00  ?6.?6.?6.?6.
003604E0   E0 04 36 00 E0 04 36 00 E8 04 36 00 E8 04 36 00  ?6.?6.?6.?6.
003604F0   F0 04 36 00 F0 04 36 00 F8 04 36 00 F8 04 36 00  ?6.?6.?6.?6.
00360500   00 05 36 00 00 05 36 00 08 05 36 00 08 05 36 00  .6..6.6.6.
00360510   10 05 36 00 10 05 36 00 18 05 36 00 18 05 36 00  6.6.6.6.
00360520   20 05 36 00 20 05 36 00 28 05 36 00 28 05 36 00   6. 6.(6.(6.
00360530   30 05 36 00 30 05 36 00 38 05 36 00 38 05 36 00  06.06.86.86.
00360540   40 05 36 00 40 05 36 00 48 05 36 00 48 05 36 00  @6.@6.H6.H6.
00360550   50 05 36 00 50 05 36 00 58 05 36 00 58 05 36 00  P6.P6.X6.X6.
00360560   60 05 36 00 60 05 36 00 68 05 36 00 68 05 36 00  `6.`6.h6.h6.
00360570   70 05 36 00 70 05 36 00 08 06 36 00 00 00 00 00  p6.p6.6.....
00360580   00 00 00 00 00 00 00 00 00 00 00 00 00 10 36 00  .............6.
00360590   00 F0 00 00 00 00 00 00 A8 05 36 00 00 00 00 00  .?.....?6.....
003605A0   00 00 00 00 00 00 00 00 B8 05 36 00 00 00 00 00  ........?6.....
003605B0   00 00 00 00 00 00 00 00 C8 05 36 00 00 00 00 00  ........?6.....
003605C0   00 00 00 00 00 00 00 00 D8 05 36 00 00 00 00 00  ........?6.....
003605D0   00 00 00 00 00 00 00 00 E8 05 36 00 00 00 00 00  ........?6.....
003605E0   00 00 00 00 00 00 00 00 F8 05 36 00 00 00 00 00  ........?6.....
003605F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360600   00 00 00 00 00 00 00 00 40 D6 FC 77 FF FF FF FF  ........@��w����
00360610   00 00 00 00 00 00 00 00 30 00 00 00 00 00 00 00  ........0.......
00360620   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360630   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360640   08 00 C8 00 00 01 00 00 EE FF EE FF 00 00 00 00  .?...??....
00360650   00 00 36 00 00 F0 00 00 00 00 36 00 10 00 00 00  ..6..?...6....
00360660   80 06 36 00 00 00 37 00 0F 00 00 00 01 00 00 00  �6...7.......
00360670   88 05 36 00 00 00 00 00 C0 06 36 00 00 00 00 00  ?6.....?6.....
00360680   02 00 08 00 00 01 0D 00 00 00 00 00 78 01 36 00  .........x6.
00360690   02 00 02 00 00 01 0B 00 00 00 00 00 00 01 36 00  .........6.
003606A0   02 00 02 00 00 01 0A 00 00 00 00 00 00 00 36 00  ...........6.
003606B0   02 00 02 00 00 01 08 00 00 00 00 00 00 00 00 00  ............
003606C0   28 01 02 00 00 10 00 00 78 01 36 00 78 01 36 00  (....x6.x6.
003606D0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606E0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360700   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

现在：00360020 00 02 00 00 00 20 00 00 28 01 00 00 FF EF FD 7F
原来：00360020 00 02 00 00 00 20 00 00 2A 01 00 00 FF EF FD 7F
现在：00360170 00 00 00 00 00 00 00 00 C8 06 36 00 C8 06 36 00
原来：00360170 00 00 00 00 00 00 00 00 B8 06 36 00 B8 06 36 00
现在：
00360670 88 05 36 00 00 00 00 00 C0 06 36 00 00 00 00 00
00360680 02 00 08 00 00 01 0D 00 00 00 00 00 78 01 36 00
00360690 02 00 02 00 00 01 0B 00 00 00 00 00 00 01 36 00
003606A0 02 00 02 00 00 01 0A 00 00 00 00 00 00 00 36 00
003606B0 02 00 02 00 00 01 08 00 00 00 00 00 00 00 00 00
003606C0 28 01 02 00 00 10 00 00 78 01 36 00 78 01 36 00
原来：
00360670 88 05 36 00 00 00 00 00 B0 06 36 00 00 00 00 00
00360680 02 00 08 00 00 01 0D 00 00 00 00 00 78 01 36 00
00360690 02 00 02 00 00 01 0B 00 00 00 00 00 00 01 36 00
003606A0 02 00 02 00 00 01 0A 00 00 00 00 00 00 00 36 00
003606B0 2A 01 02 00 00 10 00 00 78 01 36 00 78 01 36 00
003606C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
第五次分配后。

00360000   C8 00 00 00 00 01 00 00 FF EE FF EE 00 10 00 00  ?.....??..
00360010   00 00 00 00 00 FE 00 00 00 00 10 00 00 20 00 00  .....?..... ..
00360020   00 02 00 00 00 20 00 00 24 01 00 00 FF EF FD 7F  .... ..$..稞
00360030   04 00 08 06 00 00 00 00 00 00 00 00 00 00 00 00  .............
00360040   00 00 00 00 98 05 36 00 0F 00 00 00 F8 FF FF FF  ....?6....?
00360050   50 00 36 00 50 00 36 00 40 06 36 00 00 00 00 00  P.6.P.6.@6.....
00360060   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360070   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360080   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360090   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600A0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600B0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600C0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600D0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600E0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360100   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360110   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360120   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360130   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360140   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360150   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360160   00 00 00 00 00 00 00 00 FF FF 00 00 00 00 00 00  ..............
00360170   00 00 00 00 00 00 00 00 E8 06 36 00 E8 06 36 00  ........?6.?6.
00360180   80 01 36 00 80 01 36 00 88 01 36 00 88 01 36 00  €6.€6.?6.?6.
00360190   90 01 36 00 90 01 36 00 98 01 36 00 98 01 36 00  ?6.?6.?6.?6.
003601A0   A0 01 36 00 A0 01 36 00 A8 01 36 00 A8 01 36 00  ?6.?6.?6.?6.
003601B0   B0 01 36 00 B0 01 36 00 B8 01 36 00 B8 01 36 00  ?6.?6.?6.?6.
003601C0   C0 01 36 00 C0 01 36 00 C8 01 36 00 C8 01 36 00  ?6.?6.?6.?6.
003601D0   D0 01 36 00 D0 01 36 00 D8 01 36 00 D8 01 36 00  ?6.?6.?6.?6.
003601E0   E0 01 36 00 E0 01 36 00 E8 01 36 00 E8 01 36 00  ?6.?6.?6.?6.
003601F0   F0 01 36 00 F0 01 36 00 F8 01 36 00 F8 01 36 00  ?6.?6.?6.?6.
00360200   00 02 36 00 00 02 36 00 08 02 36 00 08 02 36 00  .6..6.6.6.
00360210   10 02 36 00 10 02 36 00 18 02 36 00 18 02 36 00  6.6.6.6.
00360220   20 02 36 00 20 02 36 00 28 02 36 00 28 02 36 00   6. 6.(6.(6.
00360230   30 02 36 00 30 02 36 00 38 02 36 00 38 02 36 00  06.06.86.86.
00360240   40 02 36 00 40 02 36 00 48 02 36 00 48 02 36 00  @6.@6.H6.H6.
00360250   50 02 36 00 50 02 36 00 58 02 36 00 58 02 36 00  P6.P6.X6.X6.
00360260   60 02 36 00 60 02 36 00 68 02 36 00 68 02 36 00  `6.`6.h6.h6.
00360270   70 02 36 00 70 02 36 00 78 02 36 00 78 02 36 00  p6.p6.x6.x6.
00360280   80 02 36 00 80 02 36 00 88 02 36 00 88 02 36 00  €6.€6.?6.?6.
00360290   90 02 36 00 90 02 36 00 98 02 36 00 98 02 36 00  ?6.?6.?6.?6.
003602A0   A0 02 36 00 A0 02 36 00 A8 02 36 00 A8 02 36 00  ?6.?6.?6.?6.
003602B0   B0 02 36 00 B0 02 36 00 B8 02 36 00 B8 02 36 00  ?6.?6.?6.?6.
003602C0   C0 02 36 00 C0 02 36 00 C8 02 36 00 C8 02 36 00  ?6.?6.?6.?6.
003602D0   D0 02 36 00 D0 02 36 00 D8 02 36 00 D8 02 36 00  ?6.?6.?6.?6.
003602E0   E0 02 36 00 E0 02 36 00 E8 02 36 00 E8 02 36 00  ?6.?6.?6.?6.
003602F0   F0 02 36 00 F0 02 36 00 F8 02 36 00 F8 02 36 00  ?6.?6.?6.?6.
00360300   00 03 36 00 00 03 36 00 08 03 36 00 08 03 36 00  .6..6.6.6.
00360310   10 03 36 00 10 03 36 00 18 03 36 00 18 03 36 00  6.6.6.6.
00360320   20 03 36 00 20 03 36 00 28 03 36 00 28 03 36 00   6. 6.(6.(6.
00360330   30 03 36 00 30 03 36 00 38 03 36 00 38 03 36 00  06.06.86.86.
00360340   40 03 36 00 40 03 36 00 48 03 36 00 48 03 36 00  @6.@6.H6.H6.
00360350   50 03 36 00 50 03 36 00 58 03 36 00 58 03 36 00  P6.P6.X6.X6.
00360360   60 03 36 00 60 03 36 00 68 03 36 00 68 03 36 00  `6.`6.h6.h6.
00360370   70 03 36 00 70 03 36 00 78 03 36 00 78 03 36 00  p6.p6.x6.x6.
00360380   80 03 36 00 80 03 36 00 88 03 36 00 88 03 36 00  €6.€6.?6.?6.
00360390   90 03 36 00 90 03 36 00 98 03 36 00 98 03 36 00  ?6.?6.?6.?6.
003603A0   A0 03 36 00 A0 03 36 00 A8 03 36 00 A8 03 36 00  ?6.?6.?6.?6.
003603B0   B0 03 36 00 B0 03 36 00 B8 03 36 00 B8 03 36 00  ?6.?6.?6.?6.
003603C0   C0 03 36 00 C0 03 36 00 C8 03 36 00 C8 03 36 00  ?6.?6.?6.?6.
003603D0   D0 03 36 00 D0 03 36 00 D8 03 36 00 D8 03 36 00  ?6.?6.?6.?6.
003603E0   E0 03 36 00 E0 03 36 00 E8 03 36 00 E8 03 36 00  ?6.?6.?6.?6.
003603F0   F0 03 36 00 F0 03 36 00 F8 03 36 00 F8 03 36 00  ?6.?6.?6.?6.
00360400   00 04 36 00 00 04 36 00 08 04 36 00 08 04 36 00  .6..6.6.6.
00360410   10 04 36 00 10 04 36 00 18 04 36 00 18 04 36 00  6.6.6.6.
00360420   20 04 36 00 20 04 36 00 28 04 36 00 28 04 36 00   6. 6.(6.(6.
00360430   30 04 36 00 30 04 36 00 38 04 36 00 38 04 36 00  06.06.86.86.
00360440   40 04 36 00 40 04 36 00 48 04 36 00 48 04 36 00  @6.@6.H6.H6.
00360450   50 04 36 00 50 04 36 00 58 04 36 00 58 04 36 00  P6.P6.X6.X6.
00360460   60 04 36 00 60 04 36 00 68 04 36 00 68 04 36 00  `6.`6.h6.h6.
00360470   70 04 36 00 70 04 36 00 78 04 36 00 78 04 36 00  p6.p6.x6.x6.
00360480   80 04 36 00 80 04 36 00 88 04 36 00 88 04 36 00  €6.€6.?6.?6.
00360490   90 04 36 00 90 04 36 00 98 04 36 00 98 04 36 00  ?6.?6.?6.?6.
003604A0   A0 04 36 00 A0 04 36 00 A8 04 36 00 A8 04 36 00  ?6.?6.?6.?6.
003604B0   B0 04 36 00 B0 04 36 00 B8 04 36 00 B8 04 36 00  ?6.?6.?6.?6.
003604C0   C0 04 36 00 C0 04 36 00 C8 04 36 00 C8 04 36 00  ?6.?6.?6.?6.
003604D0   D0 04 36 00 D0 04 36 00 D8 04 36 00 D8 04 36 00  ?6.?6.?6.?6.
003604E0   E0 04 36 00 E0 04 36 00 E8 04 36 00 E8 04 36 00  ?6.?6.?6.?6.
003604F0   F0 04 36 00 F0 04 36 00 F8 04 36 00 F8 04 36 00  ?6.?6.?6.?6.
00360500   00 05 36 00 00 05 36 00 08 05 36 00 08 05 36 00  .6..6.6.6.
00360510   10 05 36 00 10 05 36 00 18 05 36 00 18 05 36 00  6.6.6.6.
00360520   20 05 36 00 20 05 36 00 28 05 36 00 28 05 36 00   6. 6.(6.(6.
00360530   30 05 36 00 30 05 36 00 38 05 36 00 38 05 36 00  06.06.86.86.
00360540   40 05 36 00 40 05 36 00 48 05 36 00 48 05 36 00  @6.@6.H6.H6.
00360550   50 05 36 00 50 05 36 00 58 05 36 00 58 05 36 00  P6.P6.X6.X6.
00360560   60 05 36 00 60 05 36 00 68 05 36 00 68 05 36 00  `6.`6.h6.h6.
00360570   70 05 36 00 70 05 36 00 08 06 36 00 00 00 00 00  p6.p6.6.....
00360580   00 00 00 00 00 00 00 00 00 00 00 00 00 10 36 00  .............6.
00360590   00 F0 00 00 00 00 00 00 A8 05 36 00 00 00 00 00  .?.....?6.....
003605A0   00 00 00 00 00 00 00 00 B8 05 36 00 00 00 00 00  ........?6.....
003605B0   00 00 00 00 00 00 00 00 C8 05 36 00 00 00 00 00  ........?6.....
003605C0   00 00 00 00 00 00 00 00 D8 05 36 00 00 00 00 00  ........?6.....
003605D0   00 00 00 00 00 00 00 00 E8 05 36 00 00 00 00 00  ........?6.....
003605E0   00 00 00 00 00 00 00 00 F8 05 36 00 00 00 00 00  ........?6.....
003605F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360600   00 00 00 00 00 00 00 00 40 D6 FC 77 FF FF FF FF  ........@贮w
00360610   00 00 00 00 00 00 00 00 30 00 00 00 00 00 00 00  ........0.......
00360620   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360630   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360640   08 00 C8 00 00 01 00 00 EE FF EE FF 00 00 00 00  .?...??....
00360650   00 00 36 00 00 F0 00 00 00 00 36 00 10 00 00 00  ..6..?...6....
00360660   80 06 36 00 00 00 37 00 0F 00 00 00 01 00 00 00  €6...7.......
00360670   88 05 36 00 00 00 00 00 E0 06 36 00 00 00 00 00  ?6.....?6.....
00360680   02 00 08 00 00 01 0D 00 00 00 00 00 78 01 36 00  .........x6.
00360690   02 00 02 00 00 01 0B 00 00 00 00 00 00 01 36 00  .........6.
003606A0   02 00 02 00 00 01 0A 00 00 00 00 00 00 00 36 00  ...........6.
003606B0   02 00 02 00 00 01 08 00 00 00 00 00 00 00 00 00  ............
003606C0   04 00 02 00 00 01 0D 00 00 00 00 00 00 00 00 00  .............
003606D0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606E0   24 01 04 00 00 10 00 00 78 01 36 00 78 01 36 00  $....x6.x6.
003606F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360700   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

现在：00360020 00 02 00 00 00 20 00 00 24 01 00 00 FF EF FD 7F
原来： 00360020 00 02 00 00 00 20 00 00 28 01 00 00 FF EF FD 7F
现在：00360170 00 00 00 00 00 00 00 00 E8 06 36 00 E8 06 36 00
原来：00360170 00 00 00 00 00 00 00 00 C8 06 36 00 C8 06 36 00
现在：
00360670 88 05 36 00 00 00 00 00 E0 06 36 00 00 00 00 00
00360680 02 00 08 00 00 01 0D 00 00 00 00 00 78 01 36 00
00360690 02 00 02 00 00 01 0B 00 00 00 00 00 00 01 36 00
003606A0 02 00 02 00 00 01 0A 00 00 00 00 00 00 00 36 00
003606B0 02 00 02 00 00 01 08 00 00 00 00 00 00 00 00 00
003606C0 04 00 02 00 00 01 0D 00 00 00 00 00 00 00 00 00
003606D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
003606E0 24 01 04 00 00 10 00 00 78 01 36 00 78 01 36 00
原来：
00360670 88 05 36 00 00 00 00 00 C0 06 36 00 00 00 00 00
00360680 02 00 08 00 00 01 0D 00 00 00 00 00 78 01 36 00
00360690 02 00 02 00 00 01 0B 00 00 00 00 00 00 01 36 00
003606A0 02 00 02 00 00 01 0A 00 00 00 00 00 00 00 36 00
003606B0 02 00 02 00 00 01 08 00 00 00 00 00 00 00 00 00
003606C0 28 01 02 00 00 10 00 00 78 01 36 00 78 01 36 00
003606D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
003606E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
第六次分配后。

00360000   C8 00 00 00 00 01 00 00 FF EE FF EE 00 10 00 00  ?.....??..
00360010   00 00 00 00 00 FE 00 00 00 00 10 00 00 20 00 00  .....?..... ..
00360020   00 02 00 00 00 20 00 00 20 01 00 00 FF EF FD 7F  .... .. ..稞
00360030   04 00 08 06 00 00 00 00 00 00 00 00 00 00 00 00  .............
00360040   00 00 00 00 98 05 36 00 0F 00 00 00 F8 FF FF FF  ....?6....?
00360050   50 00 36 00 50 00 36 00 40 06 36 00 00 00 00 00  P.6.P.6.@6.....
00360060   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360070   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360080   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360090   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600A0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600B0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600C0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600D0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600E0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360100   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360110   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360120   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360130   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360140   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360150   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360160   00 00 00 00 00 00 00 00 FF FF 00 00 00 00 00 00  ..............
00360170   00 00 00 00 00 00 00 00 08 07 36 00 08 07 36 00  ........6.6.
00360180   80 01 36 00 80 01 36 00 88 01 36 00 88 01 36 00  €6.€6.?6.?6.
00360190   90 01 36 00 90 01 36 00 98 01 36 00 98 01 36 00  ?6.?6.?6.?6.
003601A0   A0 01 36 00 A0 01 36 00 A8 01 36 00 A8 01 36 00  ?6.?6.?6.?6.
003601B0   B0 01 36 00 B0 01 36 00 B8 01 36 00 B8 01 36 00  ?6.?6.?6.?6.
003601C0   C0 01 36 00 C0 01 36 00 C8 01 36 00 C8 01 36 00  ?6.?6.?6.?6.
003601D0   D0 01 36 00 D0 01 36 00 D8 01 36 00 D8 01 36 00  ?6.?6.?6.?6.
003601E0   E0 01 36 00 E0 01 36 00 E8 01 36 00 E8 01 36 00  ?6.?6.?6.?6.
003601F0   F0 01 36 00 F0 01 36 00 F8 01 36 00 F8 01 36 00  ?6.?6.?6.?6.
00360200   00 02 36 00 00 02 36 00 08 02 36 00 08 02 36 00  .6..6.6.6.
00360210   10 02 36 00 10 02 36 00 18 02 36 00 18 02 36 00  6.6.6.6.
00360220   20 02 36 00 20 02 36 00 28 02 36 00 28 02 36 00   6. 6.(6.(6.
00360230   30 02 36 00 30 02 36 00 38 02 36 00 38 02 36 00  06.06.86.86.
00360240   40 02 36 00 40 02 36 00 48 02 36 00 48 02 36 00  @6.@6.H6.H6.
00360250   50 02 36 00 50 02 36 00 58 02 36 00 58 02 36 00  P6.P6.X6.X6.
00360260   60 02 36 00 60 02 36 00 68 02 36 00 68 02 36 00  `6.`6.h6.h6.
00360270   70 02 36 00 70 02 36 00 78 02 36 00 78 02 36 00  p6.p6.x6.x6.
00360280   80 02 36 00 80 02 36 00 88 02 36 00 88 02 36 00  €6.€6.?6.?6.
00360290   90 02 36 00 90 02 36 00 98 02 36 00 98 02 36 00  ?6.?6.?6.?6.
003602A0   A0 02 36 00 A0 02 36 00 A8 02 36 00 A8 02 36 00  ?6.?6.?6.?6.
003602B0   B0 02 36 00 B0 02 36 00 B8 02 36 00 B8 02 36 00  ?6.?6.?6.?6.
003602C0   C0 02 36 00 C0 02 36 00 C8 02 36 00 C8 02 36 00  ?6.?6.?6.?6.
003602D0   D0 02 36 00 D0 02 36 00 D8 02 36 00 D8 02 36 00  ?6.?6.?6.?6.
003602E0   E0 02 36 00 E0 02 36 00 E8 02 36 00 E8 02 36 00  ?6.?6.?6.?6.
003602F0   F0 02 36 00 F0 02 36 00 F8 02 36 00 F8 02 36 00  ?6.?6.?6.?6.
00360300   00 03 36 00 00 03 36 00 08 03 36 00 08 03 36 00  .6..6.6.6.
00360310   10 03 36 00 10 03 36 00 18 03 36 00 18 03 36 00  6.6.6.6.
00360320   20 03 36 00 20 03 36 00 28 03 36 00 28 03 36 00   6. 6.(6.(6.
00360330   30 03 36 00 30 03 36 00 38 03 36 00 38 03 36 00  06.06.86.86.
00360340   40 03 36 00 40 03 36 00 48 03 36 00 48 03 36 00  @6.@6.H6.H6.
00360350   50 03 36 00 50 03 36 00 58 03 36 00 58 03 36 00  P6.P6.X6.X6.
00360360   60 03 36 00 60 03 36 00 68 03 36 00 68 03 36 00  `6.`6.h6.h6.
00360370   70 03 36 00 70 03 36 00 78 03 36 00 78 03 36 00  p6.p6.x6.x6.
00360380   80 03 36 00 80 03 36 00 88 03 36 00 88 03 36 00  €6.€6.?6.?6.
00360390   90 03 36 00 90 03 36 00 98 03 36 00 98 03 36 00  ?6.?6.?6.?6.
003603A0   A0 03 36 00 A0 03 36 00 A8 03 36 00 A8 03 36 00  ?6.?6.?6.?6.
003603B0   B0 03 36 00 B0 03 36 00 B8 03 36 00 B8 03 36 00  ?6.?6.?6.?6.
003603C0   C0 03 36 00 C0 03 36 00 C8 03 36 00 C8 03 36 00  ?6.?6.?6.?6.
003603D0   D0 03 36 00 D0 03 36 00 D8 03 36 00 D8 03 36 00  ?6.?6.?6.?6.
003603E0   E0 03 36 00 E0 03 36 00 E8 03 36 00 E8 03 36 00  ?6.?6.?6.?6.
003603F0   F0 03 36 00 F0 03 36 00 F8 03 36 00 F8 03 36 00  ?6.?6.?6.?6.
00360400   00 04 36 00 00 04 36 00 08 04 36 00 08 04 36 00  .6..6.6.6.
00360410   10 04 36 00 10 04 36 00 18 04 36 00 18 04 36 00  6.6.6.6.
00360420   20 04 36 00 20 04 36 00 28 04 36 00 28 04 36 00   6. 6.(6.(6.
00360430   30 04 36 00 30 04 36 00 38 04 36 00 38 04 36 00  06.06.86.86.
00360440   40 04 36 00 40 04 36 00 48 04 36 00 48 04 36 00  @6.@6.H6.H6.
00360450   50 04 36 00 50 04 36 00 58 04 36 00 58 04 36 00  P6.P6.X6.X6.
00360460   60 04 36 00 60 04 36 00 68 04 36 00 68 04 36 00  `6.`6.h6.h6.
00360470   70 04 36 00 70 04 36 00 78 04 36 00 78 04 36 00  p6.p6.x6.x6.
00360480   80 04 36 00 80 04 36 00 88 04 36 00 88 04 36 00  €6.€6.?6.?6.
00360490   90 04 36 00 90 04 36 00 98 04 36 00 98 04 36 00  ?6.?6.?6.?6.
003604A0   A0 04 36 00 A0 04 36 00 A8 04 36 00 A8 04 36 00  ?6.?6.?6.?6.
003604B0   B0 04 36 00 B0 04 36 00 B8 04 36 00 B8 04 36 00  ?6.?6.?6.?6.
003604C0   C0 04 36 00 C0 04 36 00 C8 04 36 00 C8 04 36 00  ?6.?6.?6.?6.
003604D0   D0 04 36 00 D0 04 36 00 D8 04 36 00 D8 04 36 00  ?6.?6.?6.?6.
003604E0   E0 04 36 00 E0 04 36 00 E8 04 36 00 E8 04 36 00  ?6.?6.?6.?6.
003604F0   F0 04 36 00 F0 04 36 00 F8 04 36 00 F8 04 36 00  ?6.?6.?6.?6.
00360500   00 05 36 00 00 05 36 00 08 05 36 00 08 05 36 00  .6..6.6.6.
00360510   10 05 36 00 10 05 36 00 18 05 36 00 18 05 36 00  6.6.6.6.
00360520   20 05 36 00 20 05 36 00 28 05 36 00 28 05 36 00   6. 6.(6.(6.
00360530   30 05 36 00 30 05 36 00 38 05 36 00 38 05 36 00  06.06.86.86.
00360540   40 05 36 00 40 05 36 00 48 05 36 00 48 05 36 00  @6.@6.H6.H6.
00360550   50 05 36 00 50 05 36 00 58 05 36 00 58 05 36 00  P6.P6.X6.X6.
00360560   60 05 36 00 60 05 36 00 68 05 36 00 68 05 36 00  `6.`6.h6.h6.
00360570   70 05 36 00 70 05 36 00 08 06 36 00 00 00 00 00  p6.p6.6.....
00360580   00 00 00 00 00 00 00 00 00 00 00 00 00 10 36 00  .............6.
00360590   00 F0 00 00 00 00 00 00 A8 05 36 00 00 00 00 00  .?.....?6.....
003605A0   00 00 00 00 00 00 00 00 B8 05 36 00 00 00 00 00  ........?6.....
003605B0   00 00 00 00 00 00 00 00 C8 05 36 00 00 00 00 00  ........?6.....
003605C0   00 00 00 00 00 00 00 00 D8 05 36 00 00 00 00 00  ........?6.....
003605D0   00 00 00 00 00 00 00 00 E8 05 36 00 00 00 00 00  ........?6.....
003605E0   00 00 00 00 00 00 00 00 F8 05 36 00 00 00 00 00  ........?6.....
003605F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360600   00 00 00 00 00 00 00 00 40 D6 FC 77 FF FF FF FF  ........@贮w
00360610   00 00 00 00 00 00 00 00 30 00 00 00 00 00 00 00  ........0.......
00360620   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360630   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360640   08 00 C8 00 00 01 00 00 EE FF EE FF 00 00 00 00  .?...??....
00360650   00 00 36 00 00 F0 00 00 00 00 36 00 10 00 00 00  ..6..?...6....
00360660   80 06 36 00 00 00 37 00 0F 00 00 00 01 00 00 00  €6...7.......
00360670   88 05 36 00 00 00 00 00 00 07 36 00 00 00 00 00  ?6......6.....
00360680   02 00 08 00 00 01 0D 00 00 00 00 00 78 01 36 00  .........x6.
00360690   02 00 02 00 00 01 0B 00 00 00 00 00 00 01 36 00  .........6.
003606A0   02 00 02 00 00 01 0A 00 00 00 00 00 00 00 36 00  ...........6.
003606B0   02 00 02 00 00 01 08 00 00 00 00 00 00 00 00 00  ............
003606C0   04 00 02 00 00 01 0D 00 00 00 00 00 00 00 00 00  .............
003606D0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606E0   04 00 04 00 00 01 08 00 00 00 00 00 00 00 00 00  ............
003606F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360700   20 01 04 00 00 10 00 00 78 01 36 00 78 01 36 00   ....x6.x6.

现在：00360020 00 02 00 00 00 20 00 00 20 01 00 00 FF EF FD 7F
原来：00360020 00 02 00 00 00 20 00 00 24 01 00 00 FF EF FD 7F
现在：00360170 00 00 00 00 00 00 00 00 08 07 36 00 08 07 36 00
原来：00360170 00 00 00 00 00 00 00 00 E8 06 36 00 E8 06 36 00
现在：
00360670 88 05 36 00 00 00 00 00 00 07 36 00 00 00 00 00
00360680 02 00 08 00 00 01 0D 00 00 00 00 00 78 01 36 00
00360690 02 00 02 00 00 01 0B 00 00 00 00 00 00 01 36 00
003606A0 02 00 02 00 00 01 0A 00 00 00 00 00 00 00 36 00
003606B0 02 00 02 00 00 01 08 00 00 00 00 00 00 00 00 00
003606C0 04 00 02 00 00 01 0D 00 00 00 00 00 00 00 00 00
003606D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
003606E0 04 00 04 00 00 01 08 00 00 00 00 00 00 00 00 00
003606F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00360700 20 01 04 00 00 10 00 00 78 01 36 00 78 01 36 00
原来：
00360670 88 05 36 00 00 00 00 00 E0 06 36 00 00 00 00 00
00360680 02 00 08 00 00 01 0D 00 00 00 00 00 78 01 36 00
00360690 02 00 02 00 00 01 0B 00 00 00 00 00 00 01 36 00
003606A0 02 00 02 00 00 01 0A 00 00 00 00 00 00 00 36 00
003606B0 02 00 02 00 00 01 08 00 00 00 00 00 00 00 00 00
003606C0 04 00 02 00 00 01 0D 00 00 00 00 00 00 00 00 00
003606D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
003606E0 24 01 04 00 00 10 00 00 78 01 36 00 78 01 36 00
003606F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00360700 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
第一次释放后。

00360000   C8 00 00 00 00 01 00 00 FF EE FF EE 00 10 00 00  ?.....??..
00360010   00 00 00 00 00 FE 00 00 00 00 10 00 00 20 00 00  .....?..... ..
00360020   00 02 00 00 00 20 00 00 22 01 00 00 FF EF FD 7F  .... .."..稞
00360030   04 00 08 06 00 00 00 00 00 00 00 00 00 00 00 00  .............
00360040   00 00 00 00 98 05 36 00 0F 00 00 00 F8 FF FF FF  ....?6....?
00360050   50 00 36 00 50 00 36 00 40 06 36 00 00 00 00 00  P.6.P.6.@6.....
00360060   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360070   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360080   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360090   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600A0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600B0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600C0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600D0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600E0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360100   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360110   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360120   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360130   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360140   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360150   00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00  ...............
00360160   00 00 00 00 00 00 00 00 FF FF 00 00 00 00 00 00  ..............
00360170   00 00 00 00 00 00 00 00 08 07 36 00 08 07 36 00  ........6.6.
00360180   80 01 36 00 80 01 36 00 88 06 36 00 88 06 36 00  €6.€6.?6.?6.
00360190   90 01 36 00 90 01 36 00 98 01 36 00 98 01 36 00  ?6.?6.?6.?6.
003601A0   A0 01 36 00 A0 01 36 00 A8 01 36 00 A8 01 36 00  ?6.?6.?6.?6.
003601B0   B0 01 36 00 B0 01 36 00 B8 01 36 00 B8 01 36 00  ?6.?6.?6.?6.
003601C0   C0 01 36 00 C0 01 36 00 C8 01 36 00 C8 01 36 00  ?6.?6.?6.?6.
003601D0   D0 01 36 00 D0 01 36 00 D8 01 36 00 D8 01 36 00  ?6.?6.?6.?6.
003601E0   E0 01 36 00 E0 01 36 00 E8 01 36 00 E8 01 36 00  ?6.?6.?6.?6.
003601F0   F0 01 36 00 F0 01 36 00 F8 01 36 00 F8 01 36 00  ?6.?6.?6.?6.
00360200   00 02 36 00 00 02 36 00 08 02 36 00 08 02 36 00  .6..6.6.6.
00360210   10 02 36 00 10 02 36 00 18 02 36 00 18 02 36 00  6.6.6.6.
00360220   20 02 36 00 20 02 36 00 28 02 36 00 28 02 36 00   6. 6.(6.(6.
00360230   30 02 36 00 30 02 36 00 38 02 36 00 38 02 36 00  06.06.86.86.
00360240   40 02 36 00 40 02 36 00 48 02 36 00 48 02 36 00  @6.@6.H6.H6.
00360250   50 02 36 00 50 02 36 00 58 02 36 00 58 02 36 00  P6.P6.X6.X6.
00360260   60 02 36 00 60 02 36 00 68 02 36 00 68 02 36 00  `6.`6.h6.h6.
00360270   70 02 36 00 70 02 36 00 78 02 36 00 78 02 36 00  p6.p6.x6.x6.
00360280   80 02 36 00 80 02 36 00 88 02 36 00 88 02 36 00  €6.€6.?6.?6.
00360290   90 02 36 00 90 02 36 00 98 02 36 00 98 02 36 00  ?6.?6.?6.?6.
003602A0   A0 02 36 00 A0 02 36 00 A8 02 36 00 A8 02 36 00  ?6.?6.?6.?6.
003602B0   B0 02 36 00 B0 02 36 00 B8 02 36 00 B8 02 36 00  ?6.?6.?6.?6.
003602C0   C0 02 36 00 C0 02 36 00 C8 02 36 00 C8 02 36 00  ?6.?6.?6.?6.
003602D0   D0 02 36 00 D0 02 36 00 D8 02 36 00 D8 02 36 00  ?6.?6.?6.?6.
003602E0   E0 02 36 00 E0 02 36 00 E8 02 36 00 E8 02 36 00  ?6.?6.?6.?6.
003602F0   F0 02 36 00 F0 02 36 00 F8 02 36 00 F8 02 36 00  ?6.?6.?6.?6.
00360300   00 03 36 00 00 03 36 00 08 03 36 00 08 03 36 00  .6..6.6.6.
00360310   10 03 36 00 10 03 36 00 18 03 36 00 18 03 36 00  6.6.6.6.
00360320   20 03 36 00 20 03 36 00 28 03 36 00 28 03 36 00   6. 6.(6.(6.
00360330   30 03 36 00 30 03 36 00 38 03 36 00 38 03 36 00  06.06.86.86.
00360340   40 03 36 00 40 03 36 00 48 03 36 00 48 03 36 00  @6.@6.H6.H6.
00360350   50 03 36 00 50 03 36 00 58 03 36 00 58 03 36 00  P6.P6.X6.X6.
00360360   60 03 36 00 60 03 36 00 68 03 36 00 68 03 36 00  `6.`6.h6.h6.
00360370   70 03 36 00 70 03 36 00 78 03 36 00 78 03 36 00  p6.p6.x6.x6.
00360380   80 03 36 00 80 03 36 00 88 03 36 00 88 03 36 00  €6.€6.?6.?6.
00360390   90 03 36 00 90 03 36 00 98 03 36 00 98 03 36 00  ?6.?6.?6.?6.
003603A0   A0 03 36 00 A0 03 36 00 A8 03 36 00 A8 03 36 00  ?6.?6.?6.?6.
003603B0   B0 03 36 00 B0 03 36 00 B8 03 36 00 B8 03 36 00  ?6.?6.?6.?6.
003603C0   C0 03 36 00 C0 03 36 00 C8 03 36 00 C8 03 36 00  ?6.?6.?6.?6.
003603D0   D0 03 36 00 D0 03 36 00 D8 03 36 00 D8 03 36 00  ?6.?6.?6.?6.
003603E0   E0 03 36 00 E0 03 36 00 E8 03 36 00 E8 03 36 00  ?6.?6.?6.?6.
003603F0   F0 03 36 00 F0 03 36 00 F8 03 36 00 F8 03 36 00  ?6.?6.?6.?6.
00360400   00 04 36 00 00 04 36 00 08 04 36 00 08 04 36 00  .6..6.6.6.
00360410   10 04 36 00 10 04 36 00 18 04 36 00 18 04 36 00  6.6.6.6.
00360420   20 04 36 00 20 04 36 00 28 04 36 00 28 04 36 00   6. 6.(6.(6.
00360430   30 04 36 00 30 04 36 00 38 04 36 00 38 04 36 00  06.06.86.86.
00360440   40 04 36 00 40 04 36 00 48 04 36 00 48 04 36 00  @6.@6.H6.H6.
00360450   50 04 36 00 50 04 36 00 58 04 36 00 58 04 36 00  P6.P6.X6.X6.
00360460   60 04 36 00 60 04 36 00 68 04 36 00 68 04 36 00  `6.`6.h6.h6.
00360470   70 04 36 00 70 04 36 00 78 04 36 00 78 04 36 00  p6.p6.x6.x6.
00360480   80 04 36 00 80 04 36 00 88 04 36 00 88 04 36 00  €6.€6.?6.?6.
00360490   90 04 36 00 90 04 36 00 98 04 36 00 98 04 36 00  ?6.?6.?6.?6.
003604A0   A0 04 36 00 A0 04 36 00 A8 04 36 00 A8 04 36 00  ?6.?6.?6.?6.
003604B0   B0 04 36 00 B0 04 36 00 B8 04 36 00 B8 04 36 00  ?6.?6.?6.?6.
003604C0   C0 04 36 00 C0 04 36 00 C8 04 36 00 C8 04 36 00  ?6.?6.?6.?6.
003604D0   D0 04 36 00 D0 04 36 00 D8 04 36 00 D8 04 36 00  ?6.?6.?6.?6.
003604E0   E0 04 36 00 E0 04 36 00 E8 04 36 00 E8 04 36 00  ?6.?6.?6.?6.
003604F0   F0 04 36 00 F0 04 36 00 F8 04 36 00 F8 04 36 00  ?6.?6.?6.?6.
00360500   00 05 36 00 00 05 36 00 08 05 36 00 08 05 36 00  .6..6.6.6.
00360510   10 05 36 00 10 05 36 00 18 05 36 00 18 05 36 00  6.6.6.6.
00360520   20 05 36 00 20 05 36 00 28 05 36 00 28 05 36 00   6. 6.(6.(6.
00360530   30 05 36 00 30 05 36 00 38 05 36 00 38 05 36 00  06.06.86.86.
00360540   40 05 36 00 40 05 36 00 48 05 36 00 48 05 36 00  @6.@6.H6.H6.
00360550   50 05 36 00 50 05 36 00 58 05 36 00 58 05 36 00  P6.P6.X6.X6.
00360560   60 05 36 00 60 05 36 00 68 05 36 00 68 05 36 00  `6.`6.h6.h6.
00360570   70 05 36 00 70 05 36 00 08 06 36 00 00 00 00 00  p6.p6.6.....
00360580   00 00 00 00 00 00 00 00 00 00 00 00 00 10 36 00  .............6.
00360590   00 F0 00 00 00 00 00 00 A8 05 36 00 00 00 00 00  .?.....?6.....
003605A0   00 00 00 00 00 00 00 00 B8 05 36 00 00 00 00 00  ........?6.....
003605B0   00 00 00 00 00 00 00 00 C8 05 36 00 00 00 00 00  ........?6.....
003605C0   00 00 00 00 00 00 00 00 D8 05 36 00 00 00 00 00  ........?6.....
003605D0   00 00 00 00 00 00 00 00 E8 05 36 00 00 00 00 00  ........?6.....
003605E0   00 00 00 00 00 00 00 00 F8 05 36 00 00 00 00 00  ........?6.....
003605F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360600   00 00 00 00 00 00 00 00 40 D6 FC 77 FF FF FF FF  ........@贮w
00360610   00 00 00 00 00 00 00 00 30 00 00 00 00 00 00 00  ........0.......
00360620   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360630   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360640   08 00 C8 00 00 01 00 00 EE FF EE FF 00 00 00 00  .?...??....
00360650   00 00 36 00 00 F0 00 00 00 00 36 00 10 00 00 00  ..6..?...6....
00360660   80 06 36 00 00 00 37 00 0F 00 00 00 01 00 00 00  €6...7.......
00360670   88 05 36 00 00 00 00 00 00 07 36 00 00 00 00 00  ?6......6.....
00360680   02 00 08 00 00 00 0D 00 88 01 36 00 88 01 36 00  ......?6.?6.
00360690   02 00 02 00 00 01 0B 00 00 00 00 00 00 01 36 00  .........6.
003606A0   02 00 02 00 00 01 0A 00 00 00 00 00 00 00 36 00  ...........6.
003606B0   02 00 02 00 00 01 08 00 00 00 00 00 00 00 00 00  ............
003606C0   04 00 02 00 00 01 0D 00 00 00 00 00 00 00 00 00  .............
003606D0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606E0   04 00 04 00 00 01 08 00 00 00 00 00 00 00 00 00  ............
003606F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360700   20 01 04 00 00 10 00 00 78 01 36 00 78 01 36 00   ....x6.x6.

现在：00360020 00 02 00 00 00 20 00 00 22 01 00 00 FF EF FD 7F
原来：00360020 00 02 00 00 00 20 00 00 20 01 00 00 FF EF FD 7F
现在：00360150 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00
原来：00360150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
现在：00360180 80 01 36 00 80 01 36 00 88 06 36 00 88 06 36 00
原来：00360180 80 01 36 00 80 01 36 00 88 01 36 00 88 01 36 00
Freelist[2]变了，变为了0x00360688，是h1申请的空间。
原来：00360680 02 00 08 00 00 01 0D 00 00 00 00 00 78 01 36 00
现在：00360680 02 00 08 00 00 00 0D 00 88 01 36 00 88 01 36 00
0x00360688由占用态变回空闲态。Unused bytes发生变化，原来用于存放数据的地方现在成为了指针。
第二次释放后。

00360000   C8 00 00 00 00 01 00 00 FF EE FF EE 00 10 00 00  ?.....??..
00360010   00 00 00 00 00 FE 00 00 00 00 10 00 00 20 00 00  .....?..... ..
00360020   00 02 00 00 00 20 00 00 24 01 00 00 FF EF FD 7F  .... ..$..稞
00360030   04 00 08 06 00 00 00 00 00 00 00 00 00 00 00 00  .............
00360040   00 00 00 00 98 05 36 00 0F 00 00 00 F8 FF FF FF  ....?6....?
00360050   50 00 36 00 50 00 36 00 40 06 36 00 00 00 00 00  P.6.P.6.@6.....
00360060   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360070   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360080   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360090   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600A0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600B0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600C0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600D0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600E0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360100   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360110   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360120   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360130   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360140   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360150   00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00  ...............
00360160   00 00 00 00 00 00 00 00 FF FF 00 00 00 00 00 00  ..............
00360170   00 00 00 00 00 00 00 00 08 07 36 00 08 07 36 00  ........6.6.
00360180   80 01 36 00 80 01 36 00 88 06 36 00 A8 06 36 00  €6.€6.?6.?6.
00360190   90 01 36 00 90 01 36 00 98 01 36 00 98 01 36 00  ?6.?6.?6.?6.
003601A0   A0 01 36 00 A0 01 36 00 A8 01 36 00 A8 01 36 00  ?6.?6.?6.?6.
003601B0   B0 01 36 00 B0 01 36 00 B8 01 36 00 B8 01 36 00  ?6.?6.?6.?6.
003601C0   C0 01 36 00 C0 01 36 00 C8 01 36 00 C8 01 36 00  ?6.?6.?6.?6.
003601D0   D0 01 36 00 D0 01 36 00 D8 01 36 00 D8 01 36 00  ?6.?6.?6.?6.
003601E0   E0 01 36 00 E0 01 36 00 E8 01 36 00 E8 01 36 00  ?6.?6.?6.?6.
003601F0   F0 01 36 00 F0 01 36 00 F8 01 36 00 F8 01 36 00  ?6.?6.?6.?6.
00360200   00 02 36 00 00 02 36 00 08 02 36 00 08 02 36 00  .6..6.6.6.
00360210   10 02 36 00 10 02 36 00 18 02 36 00 18 02 36 00  6.6.6.6.
00360220   20 02 36 00 20 02 36 00 28 02 36 00 28 02 36 00   6. 6.(6.(6.
00360230   30 02 36 00 30 02 36 00 38 02 36 00 38 02 36 00  06.06.86.86.
00360240   40 02 36 00 40 02 36 00 48 02 36 00 48 02 36 00  @6.@6.H6.H6.
00360250   50 02 36 00 50 02 36 00 58 02 36 00 58 02 36 00  P6.P6.X6.X6.
00360260   60 02 36 00 60 02 36 00 68 02 36 00 68 02 36 00  `6.`6.h6.h6.
00360270   70 02 36 00 70 02 36 00 78 02 36 00 78 02 36 00  p6.p6.x6.x6.
00360280   80 02 36 00 80 02 36 00 88 02 36 00 88 02 36 00  €6.€6.?6.?6.
00360290   90 02 36 00 90 02 36 00 98 02 36 00 98 02 36 00  ?6.?6.?6.?6.
003602A0   A0 02 36 00 A0 02 36 00 A8 02 36 00 A8 02 36 00  ?6.?6.?6.?6.
003602B0   B0 02 36 00 B0 02 36 00 B8 02 36 00 B8 02 36 00  ?6.?6.?6.?6.
003602C0   C0 02 36 00 C0 02 36 00 C8 02 36 00 C8 02 36 00  ?6.?6.?6.?6.
003602D0   D0 02 36 00 D0 02 36 00 D8 02 36 00 D8 02 36 00  ?6.?6.?6.?6.
003602E0   E0 02 36 00 E0 02 36 00 E8 02 36 00 E8 02 36 00  ?6.?6.?6.?6.
003602F0   F0 02 36 00 F0 02 36 00 F8 02 36 00 F8 02 36 00  ?6.?6.?6.?6.
00360300   00 03 36 00 00 03 36 00 08 03 36 00 08 03 36 00  .6..6.6.6.
00360310   10 03 36 00 10 03 36 00 18 03 36 00 18 03 36 00  6.6.6.6.
00360320   20 03 36 00 20 03 36 00 28 03 36 00 28 03 36 00   6. 6.(6.(6.
00360330   30 03 36 00 30 03 36 00 38 03 36 00 38 03 36 00  06.06.86.86.
00360340   40 03 36 00 40 03 36 00 48 03 36 00 48 03 36 00  @6.@6.H6.H6.
00360350   50 03 36 00 50 03 36 00 58 03 36 00 58 03 36 00  P6.P6.X6.X6.
00360360   60 03 36 00 60 03 36 00 68 03 36 00 68 03 36 00  `6.`6.h6.h6.
00360370   70 03 36 00 70 03 36 00 78 03 36 00 78 03 36 00  p6.p6.x6.x6.
00360380   80 03 36 00 80 03 36 00 88 03 36 00 88 03 36 00  €6.€6.?6.?6.
00360390   90 03 36 00 90 03 36 00 98 03 36 00 98 03 36 00  ?6.?6.?6.?6.
003603A0   A0 03 36 00 A0 03 36 00 A8 03 36 00 A8 03 36 00  ?6.?6.?6.?6.
003603B0   B0 03 36 00 B0 03 36 00 B8 03 36 00 B8 03 36 00  ?6.?6.?6.?6.
003603C0   C0 03 36 00 C0 03 36 00 C8 03 36 00 C8 03 36 00  ?6.?6.?6.?6.
003603D0   D0 03 36 00 D0 03 36 00 D8 03 36 00 D8 03 36 00  ?6.?6.?6.?6.
003603E0   E0 03 36 00 E0 03 36 00 E8 03 36 00 E8 03 36 00  ?6.?6.?6.?6.
003603F0   F0 03 36 00 F0 03 36 00 F8 03 36 00 F8 03 36 00  ?6.?6.?6.?6.
00360400   00 04 36 00 00 04 36 00 08 04 36 00 08 04 36 00  .6..6.6.6.
00360410   10 04 36 00 10 04 36 00 18 04 36 00 18 04 36 00  6.6.6.6.
00360420   20 04 36 00 20 04 36 00 28 04 36 00 28 04 36 00   6. 6.(6.(6.
00360430   30 04 36 00 30 04 36 00 38 04 36 00 38 04 36 00  06.06.86.86.
00360440   40 04 36 00 40 04 36 00 48 04 36 00 48 04 36 00  @6.@6.H6.H6.
00360450   50 04 36 00 50 04 36 00 58 04 36 00 58 04 36 00  P6.P6.X6.X6.
00360460   60 04 36 00 60 04 36 00 68 04 36 00 68 04 36 00  `6.`6.h6.h6.
00360470   70 04 36 00 70 04 36 00 78 04 36 00 78 04 36 00  p6.p6.x6.x6.
00360480   80 04 36 00 80 04 36 00 88 04 36 00 88 04 36 00  €6.€6.?6.?6.
00360490   90 04 36 00 90 04 36 00 98 04 36 00 98 04 36 00  ?6.?6.?6.?6.
003604A0   A0 04 36 00 A0 04 36 00 A8 04 36 00 A8 04 36 00  ?6.?6.?6.?6.
003604B0   B0 04 36 00 B0 04 36 00 B8 04 36 00 B8 04 36 00  ?6.?6.?6.?6.
003604C0   C0 04 36 00 C0 04 36 00 C8 04 36 00 C8 04 36 00  ?6.?6.?6.?6.
003604D0   D0 04 36 00 D0 04 36 00 D8 04 36 00 D8 04 36 00  ?6.?6.?6.?6.
003604E0   E0 04 36 00 E0 04 36 00 E8 04 36 00 E8 04 36 00  ?6.?6.?6.?6.
003604F0   F0 04 36 00 F0 04 36 00 F8 04 36 00 F8 04 36 00  ?6.?6.?6.?6.
00360500   00 05 36 00 00 05 36 00 08 05 36 00 08 05 36 00  .6..6.6.6.
00360510   10 05 36 00 10 05 36 00 18 05 36 00 18 05 36 00  6.6.6.6.
00360520   20 05 36 00 20 05 36 00 28 05 36 00 28 05 36 00   6. 6.(6.(6.
00360530   30 05 36 00 30 05 36 00 38 05 36 00 38 05 36 00  06.06.86.86.
00360540   40 05 36 00 40 05 36 00 48 05 36 00 48 05 36 00  @6.@6.H6.H6.
00360550   50 05 36 00 50 05 36 00 58 05 36 00 58 05 36 00  P6.P6.X6.X6.
00360560   60 05 36 00 60 05 36 00 68 05 36 00 68 05 36 00  `6.`6.h6.h6.
00360570   70 05 36 00 70 05 36 00 08 06 36 00 00 00 00 00  p6.p6.6.....
00360580   00 00 00 00 00 00 00 00 00 00 00 00 00 10 36 00  .............6.
00360590   00 F0 00 00 00 00 00 00 A8 05 36 00 00 00 00 00  .?.....?6.....
003605A0   00 00 00 00 00 00 00 00 B8 05 36 00 00 00 00 00  ........?6.....
003605B0   00 00 00 00 00 00 00 00 C8 05 36 00 00 00 00 00  ........?6.....
003605C0   00 00 00 00 00 00 00 00 D8 05 36 00 00 00 00 00  ........?6.....
003605D0   00 00 00 00 00 00 00 00 E8 05 36 00 00 00 00 00  ........?6.....
003605E0   00 00 00 00 00 00 00 00 F8 05 36 00 00 00 00 00  ........?6.....
003605F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360600   00 00 00 00 00 00 00 00 40 D6 FC 77 FF FF FF FF  ........@贮w
00360610   00 00 00 00 00 00 00 00 30 00 00 00 00 00 00 00  ........0.......
00360620   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360630   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360640   08 00 C8 00 00 01 00 00 EE FF EE FF 00 00 00 00  .?...??....
00360650   00 00 36 00 00 F0 00 00 00 00 36 00 10 00 00 00  ..6..?...6....
00360660   80 06 36 00 00 00 37 00 0F 00 00 00 01 00 00 00  €6...7.......
00360670   88 05 36 00 00 00 00 00 00 07 36 00 00 00 00 00  ?6......6.....
00360680   02 00 08 00 00 00 0D 00 A8 06 36 00 88 01 36 00  ......?6.?6.
00360690   02 00 02 00 00 01 0B 00 00 00 00 00 00 01 36 00  .........6.
003606A0   02 00 02 00 00 00 0A 00 88 01 36 00 88 06 36 00  ......?6.?6.
003606B0   02 00 02 00 00 01 08 00 00 00 00 00 00 00 00 00  ............
003606C0   04 00 02 00 00 01 0D 00 00 00 00 00 00 00 00 00  .............
003606D0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606E0   04 00 04 00 00 01 08 00 00 00 00 00 00 00 00 00  ............
003606F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360700   20 01 04 00 00 10 00 00 78 01 36 00 78 01 36 00   ....x6.x6.

现在：00360020 00 02 00 00 00 20 00 00 24 01 00 00 FF EF FD 7F
原来：00360020 00 02 00 00 00 20 00 00 22 01 00 00 FF EF FD 7F
现在：00360180 80 01 36 00 80 01 36 00 88 06 36 00 A8 06 36 00
原来：00360180 80 01 36 00 80 01 36 00 88 06 36 00 88 06 36 00
现在：
00360680 02 00 08 00 00 00 0D 00 A8 06 36 00 88 01 36 00
00360690 02 00 02 00 00 01 0B 00 00 00 00 00 00 01 36 00
003606A0 02 00 02 00 00 00 0A 00 88 01 36 00 88 06 36 00
原来：
00360680 02 00 08 00 00 00 0D 00 88 01 36 00 88 01 36 00
00360690 02 00 02 00 00 01 0B 00 00 00 00 00 00 01 36 00
003606A0 02 00 02 00 00 01 0A 00 00 00 00 00 00 00 36 00
观察一下这几组值，0x00360188指向了空闲堆块的头和尾，构成了一个双向链表。
0x00360188：0x003606A8 0x00360688
0x00360688：0x003606A8 0x00360188
0x003606A8：0x00360688 0x00360188
第三次释放后。

00360000   C8 00 00 00 00 01 00 00 FF EE FF EE 00 10 00 00  ?.....??..
00360010   00 00 00 00 00 FE 00 00 00 00 10 00 00 20 00 00  .....?..... ..
00360020   00 02 00 00 00 20 00 00 28 01 00 00 FF EF FD 7F  .... ..(..稞
00360030   04 00 08 06 00 00 00 00 00 00 00 00 00 00 00 00  .............
00360040   00 00 00 00 98 05 36 00 0F 00 00 00 F8 FF FF FF  ....?6....?
00360050   50 00 36 00 50 00 36 00 40 06 36 00 00 00 00 00  P.6.P.6.@6.....
00360060   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360070   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360080   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360090   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600A0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600B0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600C0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600D0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600E0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360100   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360110   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360120   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360130   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360140   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360150   00 00 00 00 00 00 00 00 14 00 00 00 00 00 00 00  ...............
00360160   00 00 00 00 00 00 00 00 FF FF 00 00 00 00 00 00  ..............
00360170   00 00 00 00 00 00 00 00 08 07 36 00 08 07 36 00  ........6.6.
00360180   80 01 36 00 80 01 36 00 88 06 36 00 A8 06 36 00  €6.€6.?6.?6.
00360190   90 01 36 00 90 01 36 00 C8 06 36 00 C8 06 36 00  ?6.?6.?6.?6.
003601A0   A0 01 36 00 A0 01 36 00 A8 01 36 00 A8 01 36 00  ?6.?6.?6.?6.
003601B0   B0 01 36 00 B0 01 36 00 B8 01 36 00 B8 01 36 00  ?6.?6.?6.?6.
003601C0   C0 01 36 00 C0 01 36 00 C8 01 36 00 C8 01 36 00  ?6.?6.?6.?6.
003601D0   D0 01 36 00 D0 01 36 00 D8 01 36 00 D8 01 36 00  ?6.?6.?6.?6.
003601E0   E0 01 36 00 E0 01 36 00 E8 01 36 00 E8 01 36 00  ?6.?6.?6.?6.
003601F0   F0 01 36 00 F0 01 36 00 F8 01 36 00 F8 01 36 00  ?6.?6.?6.?6.
00360200   00 02 36 00 00 02 36 00 08 02 36 00 08 02 36 00  .6..6.6.6.
00360210   10 02 36 00 10 02 36 00 18 02 36 00 18 02 36 00  6.6.6.6.
00360220   20 02 36 00 20 02 36 00 28 02 36 00 28 02 36 00   6. 6.(6.(6.
00360230   30 02 36 00 30 02 36 00 38 02 36 00 38 02 36 00  06.06.86.86.
00360240   40 02 36 00 40 02 36 00 48 02 36 00 48 02 36 00  @6.@6.H6.H6.
00360250   50 02 36 00 50 02 36 00 58 02 36 00 58 02 36 00  P6.P6.X6.X6.
00360260   60 02 36 00 60 02 36 00 68 02 36 00 68 02 36 00  `6.`6.h6.h6.
00360270   70 02 36 00 70 02 36 00 78 02 36 00 78 02 36 00  p6.p6.x6.x6.
00360280   80 02 36 00 80 02 36 00 88 02 36 00 88 02 36 00  €6.€6.?6.?6.
00360290   90 02 36 00 90 02 36 00 98 02 36 00 98 02 36 00  ?6.?6.?6.?6.
003602A0   A0 02 36 00 A0 02 36 00 A8 02 36 00 A8 02 36 00  ?6.?6.?6.?6.
003602B0   B0 02 36 00 B0 02 36 00 B8 02 36 00 B8 02 36 00  ?6.?6.?6.?6.
003602C0   C0 02 36 00 C0 02 36 00 C8 02 36 00 C8 02 36 00  ?6.?6.?6.?6.
003602D0   D0 02 36 00 D0 02 36 00 D8 02 36 00 D8 02 36 00  ?6.?6.?6.?6.
003602E0   E0 02 36 00 E0 02 36 00 E8 02 36 00 E8 02 36 00  ?6.?6.?6.?6.
003602F0   F0 02 36 00 F0 02 36 00 F8 02 36 00 F8 02 36 00  ?6.?6.?6.?6.
00360300   00 03 36 00 00 03 36 00 08 03 36 00 08 03 36 00  .6..6.6.6.
00360310   10 03 36 00 10 03 36 00 18 03 36 00 18 03 36 00  6.6.6.6.
00360320   20 03 36 00 20 03 36 00 28 03 36 00 28 03 36 00   6. 6.(6.(6.
00360330   30 03 36 00 30 03 36 00 38 03 36 00 38 03 36 00  06.06.86.86.
00360340   40 03 36 00 40 03 36 00 48 03 36 00 48 03 36 00  @6.@6.H6.H6.
00360350   50 03 36 00 50 03 36 00 58 03 36 00 58 03 36 00  P6.P6.X6.X6.
00360360   60 03 36 00 60 03 36 00 68 03 36 00 68 03 36 00  `6.`6.h6.h6.
00360370   70 03 36 00 70 03 36 00 78 03 36 00 78 03 36 00  p6.p6.x6.x6.
00360380   80 03 36 00 80 03 36 00 88 03 36 00 88 03 36 00  €6.€6.?6.?6.
00360390   90 03 36 00 90 03 36 00 98 03 36 00 98 03 36 00  ?6.?6.?6.?6.
003603A0   A0 03 36 00 A0 03 36 00 A8 03 36 00 A8 03 36 00  ?6.?6.?6.?6.
003603B0   B0 03 36 00 B0 03 36 00 B8 03 36 00 B8 03 36 00  ?6.?6.?6.?6.
003603C0   C0 03 36 00 C0 03 36 00 C8 03 36 00 C8 03 36 00  ?6.?6.?6.?6.
003603D0   D0 03 36 00 D0 03 36 00 D8 03 36 00 D8 03 36 00  ?6.?6.?6.?6.
003603E0   E0 03 36 00 E0 03 36 00 E8 03 36 00 E8 03 36 00  ?6.?6.?6.?6.
003603F0   F0 03 36 00 F0 03 36 00 F8 03 36 00 F8 03 36 00  ?6.?6.?6.?6.
00360400   00 04 36 00 00 04 36 00 08 04 36 00 08 04 36 00  .6..6.6.6.
00360410   10 04 36 00 10 04 36 00 18 04 36 00 18 04 36 00  6.6.6.6.
00360420   20 04 36 00 20 04 36 00 28 04 36 00 28 04 36 00   6. 6.(6.(6.
00360430   30 04 36 00 30 04 36 00 38 04 36 00 38 04 36 00  06.06.86.86.
00360440   40 04 36 00 40 04 36 00 48 04 36 00 48 04 36 00  @6.@6.H6.H6.
00360450   50 04 36 00 50 04 36 00 58 04 36 00 58 04 36 00  P6.P6.X6.X6.
00360460   60 04 36 00 60 04 36 00 68 04 36 00 68 04 36 00  `6.`6.h6.h6.
00360470   70 04 36 00 70 04 36 00 78 04 36 00 78 04 36 00  p6.p6.x6.x6.
00360480   80 04 36 00 80 04 36 00 88 04 36 00 88 04 36 00  €6.€6.?6.?6.
00360490   90 04 36 00 90 04 36 00 98 04 36 00 98 04 36 00  ?6.?6.?6.?6.
003604A0   A0 04 36 00 A0 04 36 00 A8 04 36 00 A8 04 36 00  ?6.?6.?6.?6.
003604B0   B0 04 36 00 B0 04 36 00 B8 04 36 00 B8 04 36 00  ?6.?6.?6.?6.
003604C0   C0 04 36 00 C0 04 36 00 C8 04 36 00 C8 04 36 00  ?6.?6.?6.?6.
003604D0   D0 04 36 00 D0 04 36 00 D8 04 36 00 D8 04 36 00  ?6.?6.?6.?6.
003604E0   E0 04 36 00 E0 04 36 00 E8 04 36 00 E8 04 36 00  ?6.?6.?6.?6.
003604F0   F0 04 36 00 F0 04 36 00 F8 04 36 00 F8 04 36 00  ?6.?6.?6.?6.
00360500   00 05 36 00 00 05 36 00 08 05 36 00 08 05 36 00  .6..6.6.6.
00360510   10 05 36 00 10 05 36 00 18 05 36 00 18 05 36 00  6.6.6.6.
00360520   20 05 36 00 20 05 36 00 28 05 36 00 28 05 36 00   6. 6.(6.(6.
00360530   30 05 36 00 30 05 36 00 38 05 36 00 38 05 36 00  06.06.86.86.
00360540   40 05 36 00 40 05 36 00 48 05 36 00 48 05 36 00  @6.@6.H6.H6.
00360550   50 05 36 00 50 05 36 00 58 05 36 00 58 05 36 00  P6.P6.X6.X6.
00360560   60 05 36 00 60 05 36 00 68 05 36 00 68 05 36 00  `6.`6.h6.h6.
00360570   70 05 36 00 70 05 36 00 08 06 36 00 00 00 00 00  p6.p6.6.....
00360580   00 00 00 00 00 00 00 00 00 00 00 00 00 10 36 00  .............6.
00360590   00 F0 00 00 00 00 00 00 A8 05 36 00 00 00 00 00  .?.....?6.....
003605A0   00 00 00 00 00 00 00 00 B8 05 36 00 00 00 00 00  ........?6.....
003605B0   00 00 00 00 00 00 00 00 C8 05 36 00 00 00 00 00  ........?6.....
003605C0   00 00 00 00 00 00 00 00 D8 05 36 00 00 00 00 00  ........?6.....
003605D0   00 00 00 00 00 00 00 00 E8 05 36 00 00 00 00 00  ........?6.....
003605E0   00 00 00 00 00 00 00 00 F8 05 36 00 00 00 00 00  ........?6.....
003605F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360600   00 00 00 00 00 00 00 00 40 D6 FC 77 FF FF FF FF  ........@贮w
00360610   00 00 00 00 00 00 00 00 30 00 00 00 00 00 00 00  ........0.......
00360620   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360630   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360640   08 00 C8 00 00 01 00 00 EE FF EE FF 00 00 00 00  .?...??....
00360650   00 00 36 00 00 F0 00 00 00 00 36 00 10 00 00 00  ..6..?...6....
00360660   80 06 36 00 00 00 37 00 0F 00 00 00 01 00 00 00  €6...7.......
00360670   88 05 36 00 00 00 00 00 00 07 36 00 00 00 00 00  ?6......6.....
00360680   02 00 08 00 00 00 0D 00 A8 06 36 00 88 01 36 00  ......?6.?6.
00360690   02 00 02 00 00 01 0B 00 00 00 00 00 00 01 36 00  .........6.
003606A0   02 00 02 00 00 00 0A 00 88 01 36 00 88 06 36 00  ......?6.?6.
003606B0   02 00 02 00 00 01 08 00 00 00 00 00 00 00 00 00  ............
003606C0   04 00 02 00 00 00 0D 00 98 01 36 00 98 01 36 00  ......?6.?6.
003606D0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606E0   04 00 04 00 00 01 08 00 00 00 00 00 00 00 00 00  ............
003606F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360700   20 01 04 00 00 10 00 00 78 01 36 00 78 01 36 00   ....x6.x6.

现在：00360020 00 02 00 00 00 20 00 00 28 01 00 00 FF EF FD 7F
原来：00360020 00 02 00 00 00 20 00 00 24 01 00 00 FF EF FD 7F
现在：00360150 00 00 00 00 00 00 00 00 14 00 00 00 00 00 00 00
原来：00360150 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00
现在：00360190 90 01 36 00 90 01 36 00 C8 06 36 00 C8 06 36 00
原来：00360190 90 01 36 00 90 01 36 00 98 01 36 00 98 01 36 00
Freelist[4]变了，变为了0x003606C8，是h5申请的空间。
现在：003606C0 04 00 02 00 00 00 0D 00 98 01 36 00 98 01 36 00
原来：003606C0 04 00 02 00 00 01 0D 00 00 00 00 00 00 00 00 00
0x003606C8由占用态变回空闲态。Unused bytes发生变化，原来用于存放数据的地方现在成为了指针。
第四次释放后。

00360000   C8 00 00 00 00 01 00 00 FF EE FF EE 00 10 00 00  ?.....??..
00360010   00 00 00 00 00 FE 00 00 00 00 10 00 00 20 00 00  .....?..... ..
00360020   00 02 00 00 00 20 00 00 2A 01 00 00 FF EF FD 7F   .... ..(..稞
00360030   04 00 08 06 00 00 00 00 00 00 00 00 00 00 00 00  .............
00360040   00 00 00 00 98 05 36 00 0F 00 00 00 F8 FF FF FF  ....?6....?
00360050   50 00 36 00 50 00 36 00 40 06 36 00 00 00 00 00  P.6.P.6.@6.....
00360060   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360070   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360080   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360090   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600A0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600B0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600C0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600D0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600E0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003600F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360100   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360110   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360120   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360130   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360140   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360150   00 00 00 00 00 00 00 00 04 01 00 00 00 00 00 00  ...............
00360160   00 00 00 00 00 00 00 00 FF FF 00 00 00 00 00 00  ..............
00360170   00 00 00 00 00 00 00 00 08 07 36 00 08 07 36 00  ........6.6.
00360180   80 01 36 00 80 01 36 00 88 06 36 00 88 06 36 00   €6.€6.?6.?6.
00360190   90 01 36 00 90 01 36 00 98 01 36 00 98 01 36 00  ?6.?6.?6.?6.
003601A0   A0 01 36 00 A0 01 36 00 A8 01 36 00 A8 01 36 00  ?6.?6.?6.?6.
003601B0   B0 01 36 00 B0 01 36 00 A8 06 36 00 A8 06 36 00  ?6.?6.?6.?6.
003601C0   C0 01 36 00 C0 01 36 00 C8 01 36 00 C8 01 36 00  ?6.?6.?6.?6.
003601D0   D0 01 36 00 D0 01 36 00 D8 01 36 00 D8 01 36 00  ?6.?6.?6.?6.
003601E0   E0 01 36 00 E0 01 36 00 E8 01 36 00 E8 01 36 00  ?6.?6.?6.?6.
003601F0   F0 01 36 00 F0 01 36 00 F8 01 36 00 F8 01 36 00  ?6.?6.?6.?6.
00360200   00 02 36 00 00 02 36 00 08 02 36 00 08 02 36 00  .6..6.6.6.
00360210   10 02 36 00 10 02 36 00 18 02 36 00 18 02 36 00  6.6.6.6.
00360220   20 02 36 00 20 02 36 00 28 02 36 00 28 02 36 00   6. 6.(6.(6.
00360230   30 02 36 00 30 02 36 00 38 02 36 00 38 02 36 00  06.06.86.86.
00360240   40 02 36 00 40 02 36 00 48 02 36 00 48 02 36 00  @6.@6.H6.H6.
00360250   50 02 36 00 50 02 36 00 58 02 36 00 58 02 36 00  P6.P6.X6.X6.
00360260   60 02 36 00 60 02 36 00 68 02 36 00 68 02 36 00  `6.`6.h6.h6.
00360270   70 02 36 00 70 02 36 00 78 02 36 00 78 02 36 00  p6.p6.x6.x6.
00360280   80 02 36 00 80 02 36 00 88 02 36 00 88 02 36 00  €6.€6.?6.?6.
00360290   90 02 36 00 90 02 36 00 98 02 36 00 98 02 36 00  ?6.?6.?6.?6.
003602A0   A0 02 36 00 A0 02 36 00 A8 02 36 00 A8 02 36 00  ?6.?6.?6.?6.
003602B0   B0 02 36 00 B0 02 36 00 B8 02 36 00 B8 02 36 00  ?6.?6.?6.?6.
003602C0   C0 02 36 00 C0 02 36 00 C8 02 36 00 C8 02 36 00  ?6.?6.?6.?6.
003602D0   D0 02 36 00 D0 02 36 00 D8 02 36 00 D8 02 36 00  ?6.?6.?6.?6.
003602E0   E0 02 36 00 E0 02 36 00 E8 02 36 00 E8 02 36 00  ?6.?6.?6.?6.
003602F0   F0 02 36 00 F0 02 36 00 F8 02 36 00 F8 02 36 00  ?6.?6.?6.?6.
00360300   00 03 36 00 00 03 36 00 08 03 36 00 08 03 36 00  .6..6.6.6.
00360310   10 03 36 00 10 03 36 00 18 03 36 00 18 03 36 00  6.6.6.6.
00360320   20 03 36 00 20 03 36 00 28 03 36 00 28 03 36 00   6. 6.(6.(6.
00360330   30 03 36 00 30 03 36 00 38 03 36 00 38 03 36 00  06.06.86.86.
00360340   40 03 36 00 40 03 36 00 48 03 36 00 48 03 36 00  @6.@6.H6.H6.
00360350   50 03 36 00 50 03 36 00 58 03 36 00 58 03 36 00  P6.P6.X6.X6.
00360360   60 03 36 00 60 03 36 00 68 03 36 00 68 03 36 00  `6.`6.h6.h6.
00360370   70 03 36 00 70 03 36 00 78 03 36 00 78 03 36 00  p6.p6.x6.x6.
00360380   80 03 36 00 80 03 36 00 88 03 36 00 88 03 36 00  €6.€6.?6.?6.
00360390   90 03 36 00 90 03 36 00 98 03 36 00 98 03 36 00  ?6.?6.?6.?6.
003603A0   A0 03 36 00 A0 03 36 00 A8 03 36 00 A8 03 36 00  ?6.?6.?6.?6.
003603B0   B0 03 36 00 B0 03 36 00 B8 03 36 00 B8 03 36 00  ?6.?6.?6.?6.
003603C0   C0 03 36 00 C0 03 36 00 C8 03 36 00 C8 03 36 00  ?6.?6.?6.?6.
003603D0   D0 03 36 00 D0 03 36 00 D8 03 36 00 D8 03 36 00  ?6.?6.?6.?6.
003603E0   E0 03 36 00 E0 03 36 00 E8 03 36 00 E8 03 36 00  ?6.?6.?6.?6.
003603F0   F0 03 36 00 F0 03 36 00 F8 03 36 00 F8 03 36 00  ?6.?6.?6.?6.
00360400   00 04 36 00 00 04 36 00 08 04 36 00 08 04 36 00  .6..6.6.6.
00360410   10 04 36 00 10 04 36 00 18 04 36 00 18 04 36 00  6.6.6.6.
00360420   20 04 36 00 20 04 36 00 28 04 36 00 28 04 36 00   6. 6.(6.(6.
00360430   30 04 36 00 30 04 36 00 38 04 36 00 38 04 36 00  06.06.86.86.
00360440   40 04 36 00 40 04 36 00 48 04 36 00 48 04 36 00  @6.@6.H6.H6.
00360450   50 04 36 00 50 04 36 00 58 04 36 00 58 04 36 00  P6.P6.X6.X6.
00360460   60 04 36 00 60 04 36 00 68 04 36 00 68 04 36 00  `6.`6.h6.h6.
00360470   70 04 36 00 70 04 36 00 78 04 36 00 78 04 36 00  p6.p6.x6.x6.
00360480   80 04 36 00 80 04 36 00 88 04 36 00 88 04 36 00  €6.€6.?6.?6.
00360490   90 04 36 00 90 04 36 00 98 04 36 00 98 04 36 00  ?6.?6.?6.?6.
003604A0   A0 04 36 00 A0 04 36 00 A8 04 36 00 A8 04 36 00  ?6.?6.?6.?6.
003604B0   B0 04 36 00 B0 04 36 00 B8 04 36 00 B8 04 36 00  ?6.?6.?6.?6.
003604C0   C0 04 36 00 C0 04 36 00 C8 04 36 00 C8 04 36 00  ?6.?6.?6.?6.
003604D0   D0 04 36 00 D0 04 36 00 D8 04 36 00 D8 04 36 00  ?6.?6.?6.?6.
003604E0   E0 04 36 00 E0 04 36 00 E8 04 36 00 E8 04 36 00  ?6.?6.?6.?6.
003604F0   F0 04 36 00 F0 04 36 00 F8 04 36 00 F8 04 36 00  ?6.?6.?6.?6.
00360500   00 05 36 00 00 05 36 00 08 05 36 00 08 05 36 00  .6..6.6.6.
00360510   10 05 36 00 10 05 36 00 18 05 36 00 18 05 36 00  6.6.6.6.
00360520   20 05 36 00 20 05 36 00 28 05 36 00 28 05 36 00   6. 6.(6.(6.
00360530   30 05 36 00 30 05 36 00 38 05 36 00 38 05 36 00  06.06.86.86.
00360540   40 05 36 00 40 05 36 00 48 05 36 00 48 05 36 00  @6.@6.H6.H6.
00360550   50 05 36 00 50 05 36 00 58 05 36 00 58 05 36 00  P6.P6.X6.X6.
00360560   60 05 36 00 60 05 36 00 68 05 36 00 68 05 36 00  `6.`6.h6.h6.
00360570   70 05 36 00 70 05 36 00 08 06 36 00 00 00 00 00  p6.p6.6.....
00360580   00 00 00 00 00 00 00 00 00 00 00 00 00 10 36 00  .............6.
00360590   00 F0 00 00 00 00 00 00 A8 05 36 00 00 00 00 00  .?.....?6.....
003605A0   00 00 00 00 00 00 00 00 B8 05 36 00 00 00 00 00  ........?6.....
003605B0   00 00 00 00 00 00 00 00 C8 05 36 00 00 00 00 00  ........?6.....
003605C0   00 00 00 00 00 00 00 00 D8 05 36 00 00 00 00 00  ........?6.....
003605D0   00 00 00 00 00 00 00 00 E8 05 36 00 00 00 00 00  ........?6.....
003605E0   00 00 00 00 00 00 00 00 F8 05 36 00 00 00 00 00  ........?6.....
003605F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360600   00 00 00 00 00 00 00 00 40 D6 FC 77 FF FF FF FF  ........@贮w
00360610   00 00 00 00 00 00 00 00 30 00 00 00 00 00 00 00  ........0.......
00360620   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360630   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360640   08 00 C8 00 00 01 00 00 EE FF EE FF 00 00 00 00  .?...??....
00360650   00 00 36 00 00 F0 00 00 00 00 36 00 10 00 00 00  ..6..?...6....
00360660   80 06 36 00 00 00 37 00 0F 00 00 00 01 00 00 00  €6...7.......
00360670   88 05 36 00 00 00 00 00 00 07 36 00 00 00 00 00  ?6......6.....
00360680   02 00 08 00 00 00 0D 00 88 01 36 00 88 01 36 00  ......?6.?6.
00360690   02 00 02 00 00 01 0B 00 00 00 00 00 00 01 36 00  .........6.
003606A0   08 00 02 00 00 00 0A 00 B8 01 36 00 B8 01 36 00  ......?6.?6.
003606B0   02 00 02 00 00 01 08 00 00 00 00 00 00 00 00 00  ............
003606C0   04 00 04 00 00 00 0D 00 98 01 36 00 98 01 36 00  ......?6.?6.
003606D0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
003606E0   04 00 08 00 00 01 08 00 00 00 00 00 00 00 00 00  ............
003606F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00360700   20 01 04 00 00 10 00 00 78 01 36 00 78 01 36 00   ....x6.x6.

现在：00360020 00 02 00 00 00 20 00 00 2A 01 00 00 FF EF FD 7F
原来：00360020 00 02 00 00 00 20 00 00 28 01 00 00 FF EF FD 7F
现在：00360150 00 00 00 00 00 00 00 00 04 01 00 00 00 00 00 00
原来：00360150 00 00 00 00 00 00 00 00 14 00 00 00 00 00 00 00
现在：
00360180 80 01 36 00 80 01 36 00 88 06 36 00 88 06 36 00
00360190 90 01 36 00 90 01 36 00 98 01 36 00 98 01 36 00
003601B0 B0 01 36 00 B0 01 36 00 A8 06 36 00 A8 06 36 00
原来：
00360180 80 01 36 00 80 01 36 00 88 06 36 00 A8 06 36 00
00360190 90 01 36 00 90 01 36 00 C8 06 36 00 C8 06 36 00
003601B0 B0 01 36 00 B0 01 36 00 B8 01 36 00 B8 01 36 00
Freelist[2]只剩一个0x00360688，Freelist[4]没了，FreeList[8]变为了0x003606A8。

现在：

原来：
h1：00360680 02 00 08 00 00 00 0D 00 A8 06 36 00 88 01 36 00(已释放)
h2：00360690 02 00 02 00 00 01 0B 00 00 00 00 00 00 01 36 00
h3：003606A0 02 00 02 00 00 00 0A 00 88 01 36 00 88 06 36 00(已释放)
h4：003606B0 02 00 02 00 00 01 08 00 00 00 00 00 00 00 00 00
h5：003606C0 04 00 02 00 00 00 0D 00 98 01 36 00 98 01 36 00(已释放)
003606D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
h6：003606E0 04 00 04 00 00 01 08 00 00 00 00 00 00 00 00 00
003606F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
这就是堆块合并的过程。堆块合并可以更加有效地利用内存，但往往需要修改多处指针，也是一个费时的工作。因此，堆块合并只发生在空表中。在强调分配效率的快表中，堆块合并一般会被通过设置堆块为占用态来禁止。另外，空表中的第一个块不会向前合并，最后一个块不会向后合并。

houjingyi233

关注

1
点赞
踩
3

收藏

觉得还不错? 一键收藏
1
评论
0day安全软件漏洞分析技术读书笔记-windows2000的堆的工作方式(上)

空闲态堆块和占用态堆块的块首结构基本一致，只是将块首后数据区的前8个字节用于存放空表指针了。这8个字节在变回占用态时将重新分回块身用于存放数据。堆表中包含的信息依次是段表索引、虚表索引、空表使用标识和空表索引区。空表索引区：偏移0x178指向快表的指针：偏移0x5840x00360178指向0x00360688，而接下来其它的索引都是指向自身。00360170 0
复制链接

扫一扫