How HP UFT/QTP Recognizes Objects for Recording & Playback

While delivering our HP UFT/QTP training course, I am frequently asked why it is necessary to launch the application under test (AUT) after QTP (QuickTest Pro) has launched (and the appropriate add-ins are loaded).

The simple answer is that UFT/QTP recognizes objects by “hooking” into the AUT. This is accomplished by “watching” for applications to hook into so UFT can interact with the AUT to support record and replay functionality as well as expose the underlying objects. The potential side effect of not launching QTP before the AUT is that the objects may not be recognized properly and recording or playback is unsuccessful.

The technical answer is more complex and there is very little information detailing the underlying technology. It is helpful to understand how objects are recognized and interacted with from a technical perspective to realize potential implications.

Note:  Throughout this article I will use UFT (Unified Functional Testing) and QTP (QuickTest Pro) interchangeably. Both refer to the GUI component of UFT, also known as QTP.

Hooking explained

Interaction with the AUT in UFT is achieved through hooking and instrumentation - in the case of Windows based applications, Windows Hooks.

“A hook is a mechanism by which an application can intercept events, such as messages, mouse actions, and keystrokes. A function that intercepts a particular type of event is known as a hook procedure. A hook procedure can act on each event it receives, and then modify or discard the event.”
http://msdn.microsoft.com/en-us/library/windows/desktop/ms644959(v=vs.85).aspx

Hooking allows external applications to gain control and alter application behavior. Application events, function calls and messages can be intercepted without access to the source code. Simply put, hooking allows UFT to “spy” on the application.

Windows processes are launched in an isolated virtual address space (VAS). Upon execution of an application, Windows identifies import references and searches for the required DLLs to load in order support these references. Hooks can be implemented through physical modification (reverse engineering) or runtime modification (DLL injection). Instrumentation is similar to hooking but it implements more advanced debugging capabilities and is achieved at compile time (more on this later).

UFT “watches” for applications that are launched, specifically relating to the loaded add-ins, and injects DLL code (hooks) into the process memory. This is runtime modificationNearly all add-ins are comprised of hooking DLLs.

Hooking is primarily used in the recording functionality of QTP. By hooking into the AUT, application events can be exposed, observed and recorded by third party applications (i.e., QTP).

After QTP injects the appropriate DDLs into the AUT process during runtime, the GUI objects are obtained by querying the API of the platform. This allows for the GUI object’s native properties to be exposed to QTP in the Object Spy and during recording and playback of scripts. The GUI object structure of the application is exposed, unveiling the object hierarchy for navigation and object discovery.

If the AUT is launched before UFT, the hooking mechanism is not loaded into process memory. The side effect is that UFT cannot intercept events in the AUT and objects cannot be properly identified or interacted with.

What QTP hooking looks like

By using Sysinternals’ Process Explorer, we can observe the DLLs that are loaded into process memory. In the example below, I compare and identify the hooking DLLs that are loaded into Internet Explorer (iexplore.exe) by QuickTest Pro when selecting the web add-in.

Opening Internet Explorer before QTP (without hooks)

Process Explorer - UFT/QTP iexplore.exe without hooks

Opening Internet Explorer after QTP (with hooks)

Process Explorer - UFT/QTP iexplore.exe with hooksBy comparing both lists of loaded DLLs, it is possible to identify exactly what hooking DLLs are injected into the iexplore.exe process. They are listed below:

bbHookLoaderU.dll		QuickTest Professional (Unicode)	Hewlett-Packard Development Company, L.P.	C:\Program Files (x86)\HP\QuickTest Professional\bin\bbHookLoaderU.dll
HookMgr.dll				QuickTest Professional (Unicode)	Hewlett-Packard Development Company, L.P.	C:\Program Files (x86)\HP\QuickTest Professional\bin\HookMgr.dll
ie_hooksU.dll			QuickTest Professional (Unicode)	Hewlett-Packard Development Company, L.P.	C:\Program Files (x86)\HP\QuickTest Professional\bin\ie_hooksU.dll
ime_srv.dll				QuickTest Professional (Unicode)	Hewlett-Packard Development Company, L.P.	C:\Program Files (x86)\HP\QuickTest Professional\bin\ime_srv.dll
MfxApplicationU.dll		QuickTest Professional (Unicode)	Hewlett-Packard Development Company, L.P.	C:\Program Files (x86)\HP\QuickTest Professional\bin\MfxApplicationU.dll
MicAgentInjector.dll	QuickTest Professional (Unicode)	Hewlett-Packard Development Company, L.P.	C:\Program Files (x86)\HP\QuickTest Professional\bin\MicAgentInjector.dll
mmalloc_logic.dll		Hewlett-Packard Company															C:\Program Files (x86)\HP\QuickTest Professional\bin\mmalloc_logic.dll
mosifs32.dll			Hewlett-Packard Company															C:\Program Files (x86)\HP\QuickTest Professional\bin\mosifs32.dll
SharedMemoryProcU.dll	QuickTest Professional (Unicode)	Hewlett-Packard Development Company, L.P.	C:\Program Files (x86)\HP\QuickTest Professional\bin\SharedMemoryProcU.dll
thrdutil.dll			Hewlett-Packard Company															C:\Program Files (x86)\HP\QuickTest Professional\bin\thrdutil.dll
WIAgentLogFileU.dll		QuickTest Professional (Unicode)	Hewlett-Packard Development Company, L.P.	C:\Program Files (x86)\HP\QuickTest Professional\bin\WIAgentLogFileU.dll

Implications of hooking

When QuickTest Pro is first launched, the Add-in Manager dialog is presented. This dialog states, “To maximize performance and object identification reliability, load only the add-ins you need.” Application performance can be significantly degraded if too many add-ins, or hooks, are loaded. Directly from the Windows Hooks (Overview) page we see a reference to this fact:

“Hooks tend to slow down the system because they increase the amount of processing the system must perform for each message. You should install a hook only when necessary, and remove it as soon as possible.”

Unnecessarily loading hooking DLLs (add-ins) can not only degrade performance but it can also interfere with properly exposing the GUI objects for identification. In addition, a poorly coded hooking DLL can impact the overall behavior of the application.

Source code instrumentation vs. Hooking

Source code instrumentation is achieved at compile time by including a third party library consisting of code that exposes the application layer events and objects. Once this library is included in the application, code is added at the time of GUI object creation (i.e., constructors) that exposes the object’s native properties and events.

Application developers tend resist this method because they do not want to include code developed by a third party that they may not have control over. Automation engineers are generally indifferent as long as the end result is the same as hooking, but prefer to avoid having to go through the internal processes and channels to approve third party code integration during application development. It is easier to hook into an application during runtime than to implement additional code at compile time, therefore hooking is more commonly used in functional test automation than source code instrumentation.

Recall that hooking allows events to be intercepted through runtime modification (DLL injection). Hooking, at its very essence, is code injection.

Both source code instrumentation and hooking modify the AUT. The difference lies in the implementation – code is either injected during application compilation or runtime execution. The end result is essentially the same. Both methods have the potential to inadvertently introduce defects into the application.

Your thoughts…

Do you think compile time instrumentation or runtime hooking has less of an impact on automation and overall application quality?

If you find this post informative, please share it using the links below or obtain free updates through our RSS feed.

What's Next?

Did you enjoy this article? Help spread the word by sharing:

Join the Northway Navigator Club today and get access to restricted content including our best tips and tricks. Membership is free! You will also receive free email updates by registering.

Engage in the conversation and leave a comment:

Brian MacKenzie

About Brian MacKenzie (24 articles)




Brian has over 14 years of experience working in IT, ranging from Software Quality Assurance, Software Development, Business Management to Systems Administration, in a wide range of technologies, languages, databases, systems and software. He has experience in both software quality assurance and software development roles. Brian specializes in HP LoadRunner, HP UFT (QuickTest Pro and Service Test), Mobile Testing and Automation, HP ALM and HP Service Virtualization, as well as delivering certified instructor training in HP UFT and mentoring in Service Test and Service Virtualization.



  • Eilyn

    very useful!

    • Brian MacKenzie

      Eilyn – thanks for the feedback!

  • Madhavan

    Hi Brian, Do you have any sample code to expose window objects to UFT
    Thank you

    • http://northwaysolutions.com/ Brian MacKenzie

      Can you be more specific?

      • Madhavan

        Brain, I have window based application I tried to use UFT for this, but UFT not recognize most of the object in the application, even though application having unique identification like name property for all the objects, I checked all these unique properties in my application spy but UFT gui spy not displaying those unique identifications, for example text fields are recognize by its value in the field not by name of text field and also there is a table object in my window based application but UFT not considering that object as table it is considering as single object(not table object) each cell as recognize by location(click 123,34), but I tried automation tool called Ranorex it is identifying my application table object as table and elements properly, also it is showing unique property of all the objects, So googled about these things, I read your Blog, which is very interesting to know that we can write hooks program to expose window properties to UFT, so I asked you do you have any sample hooks programing code to solve my issue, so that I can try to develop from there.
        Thank you