From 726b9ce78b6f75e66e1cf794bf35e625f1188e2d Mon Sep 17 00:00:00 2001
From: Gabor Gyorvari <scr34m@gmail.com>
Date: Wed, 7 Mar 2018 20:05:07 +0100
Subject: [PATCH] Pattern for XOR-ed content math, reported in #14

---
 definitions/patterns_re.txt | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/definitions/patterns_re.txt b/definitions/patterns_re.txt
index aac9eea..c589d46 100644
--- a/definitions/patterns_re.txt
+++ b/definitions/patterns_re.txt
@@ -79,6 +79,9 @@ chr\s*\(\s*['"]?\s*((95)|(0[Xx]5[Ff]))\s*['"]?\s*\)
 # XOR-ed strings with custom math
 %\(\d+\-\d+\+\d+\)==\(\-\d+\+\d+\+\d+\)
 
+# XOR-ed strings with custom math 2.
+\(\$[a-zA-Z0-9]+%\d==\(\d+\-\d+\+\d+\)
+
 # eval code from POST on second nested level
 eval\(\$[a-z0-9_]+\(\$_POST