From 4161148d3cf318604ace2da4e5002a074139ae86 Mon Sep 17 00:00:00 2001
From: nichogenius <nichogenius@gmail.com>
Date: Sat, 19 Aug 2017 16:58:28 -0600
Subject: [PATCH] base64 pattern updates

---
 patterns_raw.txt | 36 ++++++++++++++++++++++++++++--------
 1 file changed, 28 insertions(+), 8 deletions(-)

diff --git a/patterns_raw.txt b/patterns_raw.txt
index af4f7d0..313cc23 100644
--- a/patterns_raw.txt
+++ b/patterns_raw.txt
@@ -107,20 +107,25 @@ SFRUUF9VU0VSX0FHRU5U
 hUVFBfVVNFUl9BR0VOV
 IVFRQX1VTRVJfQUdFTl
 
-# "file_get_contents" in base64
-ZmlsZV9nZXRfY29udGVudH
-ZpbGVfZ2V0X2NvbnRlbnRz
-maWxlX2dldF9jb250ZW50c
+# "file" in base64
+ZmlsZ
+ZpbG
+maWxl
 
 # "gzinflate" in base64
 Z3ppbmZsYXRl
 d6aW5mbGF0Z
 nemluZmxhdG
 
-# "fopen" in base64
-Zm9wZW
-ZvcGVu
-mb3Blb
+# "open" in base64
+b3Blb
+9wZW
+vcGVu
+
+# "close" in base64
+Y2xvc2
+Nsb3Nl
+jbG9zZ
 
 # "array_" in base64
 YXJyYXlf
@@ -162,6 +167,21 @@ R0xPQkFMU
 dMT0JBTF
 HTE9CQUxT
 
+# "sizeof" in base64
+c2l6ZW9m
+NpemVvZ
+zaXplb2
+
+# "printf" in base64
+cHJpbnRm
+ByaW50Z
+wcmludG
+
+# "define" in base64
+ZGVmaW5l
+RlZmluZ
+kZWZpbm
+
 # Obfuscation related code
 eval("?>
 "base64_decode"