In addition to the hook functions Dolgubon linked in his post, there is also SecurePostHook which can be used with protected functions. Unlike ZO_PreHook, SecurePostHook calls the hook after the original function.
https://github.com/esoui/esoui/blob/...ntation.txt#L8