execution starts somewhere between 3328 and 3456 (0xd00 and 0xd80) - possibly before, if triggering code is longer

.. padded loader with 1636 nops, this seems to be the exact amount needed
