# PokerStars INI decoder and decompressor 0.1
# script for QuickBMS http://aluigi.org/papers.htm#quickbms
#
# Usage:
#   quickbms.exe pokerstars_inidec.bms PokerStars.ini c:\
# will be created a new file PokerStars.ini.decrypted in c: with the plain-text content

get NAME filename
string NAME += ".decrypted"
get SIZE asize

    # the following XOR key is the xor between
    # "Microsoft .NET Runtime Error: %s\0/update.ini\0"
    # and ".NET Framework Internal Error"
filexor "0x63 0x27 0x26 0x26 0x4F 0x35 0x1D 0x07 0x19 0x45 0x59 0x21 0x37 0x3F 0x00 0x1B 0x1B 0x1A 0x11 0x1B 0x03 0x04 0x4C 0x65 0x37 0x00 0x1D 0x1D 0x48 0x20 0x0B 0x3D 0x45 0x7B 0x55 0x36 0x16 0x00 0x19 0x00 0x59 0x06 0x1C 0x02 0x20"

comtype gzip
clog NAME 0 SIZE SIZE