The demo first tries to load hifi8032.xm and then falls back to reading 420377 bytes at offset 453371 (658769 uncompressed according to console log) from herbst77.avi which might contain the module using an unknown compression / encryption scheme. The overall PAQ archive starts at 242688.