I have a question for you guyssss...  If you pack a hook with something that is not easily decryptable (so not things like upx, etc)  and use a harder protection such as armadillo would it prevent a hook from being detected?  Or will still get detected because it will archive the same results just in a slightly different manner?

It'll still be detected. Hooks, 'hook' into other files and call other functions, which is what is caught.

Armadillo is easy to unpack as well, actually all packers are lol. It will not make your hook undetected due to way UTDC/GNAT scans for hooks, they do this by verifying bytes in a file or at a certain offset using windows API's. Both securitys use methods which are more or less the same.

- HyPz

Okay I thought so.  So is it possible to hook an api call to make it unusable to other programs that call it?

Yes, if you like to dive into Ring0 it is

- HyPz

I just dont know c++ and I wanted to make a hook and I was brainstorming some new techniques