Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a OCX control which is loaded in Internet Explorer (used to show stream from IP camera). To see live video I have to properly connect to server etc. using methods of created object. The best idea will be to monitor which methods are called from IE. Is there any possibility to monitor these calls and parameters with for example plug-in for IE or some API monitor program?

OCX information in OLEView Methods details

share|improve this question
up vote 6 down vote accepted

You can use API Monitor available here: As this is probably a custom OCX, you will have to write a custom headers file, you can this as an example:

share|improve this answer
Creating custom headers by hand seems to be time consuming and error prone but that software looks great, Also author promises that in the next version that step will be autmated. Great! – n3vermind Feb 6 '14 at 15:03

As 3asm_ suggested, it would be best to try API Monitor first.

If that doesn't work, though, an alternative would be to attach to IE with a debugger and set logging breakpoints on the entrypoint of each method in the OCX. You can then see the order in which IE calls them and the arguments that are passed.

share|improve this answer
That's also a very good idea, you may use Immunity Debugger as it has a plugin for listing and setting breakpoints with the !activex command – 3asm_ Feb 5 '14 at 14:41
@3asm_ do you have a link or name to that plugin? – amccormack Feb 21 '15 at 17:54

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.