Comment by layer8

I edited my post after verifying the actual bytes, it turned out to be slightly more complicated.