added correct steps for extract right shellcode

Signed-off-by: degrigis <fbi.gritti@gmail.com>