Rules for Phanuel

Author: Starz0r

descriptions/AntiCheat.Phanuel.md

@@ -0,0 +1 @@
+**Phanuel** also known as NEAC Protect, is anti-cheating software created, developed, and maintained by NetEase.

rules.ini

@@ -239,6 +239,9 @@ PunkBuster[] = (?:^|/)Punkbuster(?:$|/)
 Ricochet = (?:^|/)Randgrid\.sys$
 TenProtect = (?:^|/)TP3Helper\.exe$
 XIGNCODE3 = \.xem$
+Phanuel[] = (?:^|/)NeacInterface\.dll$
+Phanuel[] = (?:^|/)NeacSafe64\.sys$
+Phanuel[] = NeacClient\.exe$
 
 [SDK]
 Adobe_Flash[] = (?:^|/)Flash[ _]?Player(?:$|/|\.)

tests/types/AntiCheat.Phanuel.txt

@@ -0,0 +1,3 @@
+NeacInterface.dll
+NeacSafe64.sys
+*NeacClient.exe

tests/types/_NonMatchingTests.txt

@@ -1345,3 +1345,22 @@ odin_dll
 libodin_so
 notodin.dll
 notlibodin.so
+NeacInterface
+NeacInterface_dll
+notactuallyNeacInterface.dll
+NeacInterface.dllwhoops
+sub/dir/notactuallyNeacInterface.dll
+sub/dir/NeacInterface.dllwhoops
+NeacSafe64
+NeacSafe64_sys
+notactuallyNeacSafe64.sys
+NeacSafe64.syswhoops
+sub/dir/notactuallyNeacSafe64.sys
+sub/dir/NeacSafe64.syswhoops
+NeacClient
+NeacClient_exe
+NeacClient.exewhoops
+sub/dir/NeacClient.exewhoops
+NeacClient.exe/sub/dir
+NeacClient_exe/sub/dir
+NeacClient_exenope/sub/dir