Just point the script at a ClickOnce .application manifest and it will dump the remote contents to ./unpack. Performs no verification, and supports only simple auto-generated ClickOnce manifests.