SANITIZED BUILD
===============

This copy of the project has had every outbound network call to non first party
hosts and every process / code execution path neutralized. The goal was zero
remote connections and no binary execution, even at the cost of some cosmetic
features. The original file and folder layout is unchanged so it still opens and
builds as a normal Visual Studio project.

This was edited from source only. It was never compiled or run here, so build it
in Visual Studio and report any compile errors. Unreachable code warnings are
expected and harmless.

REMOVED / NEUTRALIZED
---------------------
Executable + control (the real malware surface):
- Spotify "QuickSong" feature: the download of QuickSong.exe (saved as
  OsamaBinLaden.exe), its auto update, its hidden launch, and the cmd.exe
  game restart / taskkill.
- Seralyth ServerData cluster: the websocket to menu.seralyth.software, the
  telemetry upload, the per player data harvesting, and the remote server data /
  admin list fetch. Master switch ServerDataEnabled set to false and every entry
  point guarded directly, because the switch was not actually honored by the code.
- ConsoleAdmin: the startup download of admin icons and the preload + in memory
  load of remote Unity asset bundles, plus the inbound networked command receiver.
- Plugin DLL loader (PluginManager): already dead in the original (fully commented
  out), left as is.

Downloads from third party hosts (data only, lower risk, also removed):
- easyanticheat.win announcements fetch and its downstream media cascade.
- Startup logo + video downloads (shibagt.github.io, github odinong).
- Beta access list fetch and the remote "broken mods" kill list (shibagt.github.io).
- Custom background image download (this one also disabled TLS certificate
  validation, which is its own weakness).
- Changelog logo + version polling (shibagt.github.io).
- Seasonal elf pathing service (raw.githubusercontent.com/gorillauntitled).
- Click / notification sound fetch from shibagt (used all over the menu).
- Fun Stuff meme cosmetics (doge, grosh, vape, tung, boombox) from github odinong.
- Various remote UI icons (icons8, imgur, wsrv.nl proxy).

KEPT ON PURPOSE (reviewed, benign)
----------------------------------
- All local file reads using file:// (cached assets, your own picked files).
- The native file picker for choosing your own local audio file.
- Embedded asset bundle loading from inside the mod (LoadFromStream).
- Media key presses for play / pause / next.
- Discord Rich Presence (talks to the local Discord app over IPC, not the internet).
- One local folder open: ALMLibrary.OpenFolder uses explorer.exe to open a local
  config folder. This cannot deliver malware. It is the only remaining Process.Start.
  Say the word and it can be removed too.

NOTE
----
The neutralization works by short circuiting each dangerous method at its entry,
so the code never runs. The now dead lines and their URLs still appear in the
files but are unreachable. If you want them physically stripped out instead, that
can be done as a follow up.
