I am writing a TCP deobfuscation plugin that XORs each byte of the payload with 0xAA and then re-parses