Scans foor hook in exports of ntoskrnl.exe by checking if 1st
bytes from ntoskrnl.exe on disk are changed in loaded image.
Used to locate hooks in TheMida 1.0.0.5 tutorial
