楼主想hook winHttpOpen，然后就用apimonitor跑了一下，结果发现一个奇怪的现象，整个调用过程没有用到connect和WSAConnect，请问下有没有人知道这是怎么回事？
WSASocketW ( AF_INET, SOCK_STREAM, IPPROTO_TCP, NULL, 0, WSA_FLAG_OVERLAPPED )
bind ( 920, 0x034ffac8, 128 )
setsockopt ( 920, IPPROTO_TCP, TCP_NODELAY, 0x034ffac0, 4 )
htons ( 80 )
WSAIoctl ( 920, SIO_GET_EXTENSION_FUNCTION_POINTER, 0x034ffb44, 16, 0x034ffabc, 4, 0x034ffab8, NULL, NULL )
WSARecv ( 920, 0x004d59d0, 1, 0x045df864, 0x045df868, 0x004d5920, NULL )
WSAGetLastError ( )
WSASend ( 920, 0x004de4a8, 1, 0x045df848, 0, 0x004de3f8, NULL )
WSARecv ( 920, 0x004f1358, 1, 0x0471fc4c, 0x0471fc50, 0x004f12a8, NULL )
WSAGetLastError ( )
WinHttpReceiveResponse ( 0x004e8150, NULL )
WinHttpQueryDataAvailable ( 0x004e8150, 0x03e3f1ac )
WinHttpReadData ( 0x004e8150, 0x00507860, 1, 0x03e3f1a0 )
WinHttpQueryDataAvailable ( 0x004e8150, 0x03e3f1ac )
WinHttpReadData ( 0x004e8150, 0x00507860, 0, 0x03e3f1a0 )
WinHttpCloseHandle ( 0x004e8150 )
WinHttpCloseHandle ( 0x004e8068 )
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
