Custom stager with XOR decryption + encrypting proxy to obfuscate the second stage