Written for anyone who would rather know before they click Run. Every line here describes the build you can download today. Things we haven't shipped are left off the list on purpose.
The menu is downloaded, verified and injected into the running game. Your plugins folder never sees it, so there is nothing to copy out of your install afterwards.
Every build is AES-256-CBC sealed against your hardware ID before it leaves the API. A recording of the download is inert on a second PC.
A paid key locks to the first machine that redeems it. Reuse elsewhere logs a mismatch with the IP and hardware ID attached, which the owner sees in their panel.
Namespace, class and method names are never sent with the catalog listing, and the real DLL filename is not in any public response. Scraping the store does not hand you an injector recipe.
Renaming, string encryption and control-flow mangling are applied before upload, so a dumped assembly reads as noise rather than source. We ship whatever they published, including their guards.
The API states a SHA-256 for each build and the loader compares it before injection. A mismatch is discarded, not warned about.