#decompilation articles

Reading top-level statements in decompiled C#: the synthesized Program class and the Main entry point

A C# file that uses top-level statements looks like it has no class and no Main — you just write statements and the program runs. But an assembly has to have an entry point, and the metadata has to na

7 min readdelta1labs.hashnode.dev

Zero Heartbeat1d ago

Decompiling P/Invoke and DllImport: Reading a .NET Assembly''s Native Interop

When you need to understand what an unfamiliar .NET assembly actually does — not to its own data, but to the machine — the native interop is where the answer lives. Managed code that stays inside the

4 min readdelta1labs.hashnode.dev

Zero Heartbeat1d ago

Decompiling a Blazor WebAssembly App: Reading the .NET DLLs the Browser Downloaded

The first time someone opens the browser dev tools on a Blazor WebAssembly app and sees a _framework folder full of .wasm files, it looks reassuringly opaque — like the compiled WebAssembly blob you c

4 min readdelta1labs.hashnode.dev

Zero Heartbeat1d ago

Decompiling ReadyToRun (R2R) Assemblies: Why Precompiled Native Code Still Decompiles Cleanly

If you have ever been handed a "precompiled" .NET assembly and assumed a decompiler would choke on it, ReadyToRun is the happy surprise. R2R is how .NET ships fast-starting code — the runtime librarie

4 min readdelta1labs.hashnode.dev

Zero Heartbeat1d ago

Decompiling F#-Compiled Assemblies in a C# Decompiler: Reading Unions, Records, and Modules

If you have ever opened an F#-built DLL in a decompiler expecting to see let and match and instead found classes with names like Tag and NewCircle, this post is for you. F# and C# are different langua

6 min readdelta1labs.hashnode.dev

Zero Heartbeat1d ago

Decompiling extension methods: the [Extension] attribute is the only trace, the receiver was just the first argument, and the call that looks static

An extension method is one of the purest examples of C# sugar that evaporates in IL. You write this on the first parameter, call it as text.WordCount(), and feel like you added a method to string. The

8 min readdelta1labs.hashnode.dev

Zero Heartbeat1d ago

Decompiling extension methods: the [Extension] attribute is the only trace, the receiver was just the first argument, and the call that looks static

An extension method is one of the purest examples of C# sugar that evaporates in IL. You write this on the first parameter, call it as text.WordCount(), and feel like you added a method to string. The

8 min readdelta1labs.hashnode.dev

Zero Heartbeat1d ago

How to decompile a .NET DLL to C# (2026 guide)

To decompile a .NET DLL back to C#, open the assembly in a .NET decompiler such as Glass.NET, ILSpy or dotPeek — the tool reads the IL and metadata inside the DLL and reconstructs readable C# you can

8 min readdelta1labs.hashnode.dev

Zero Heartbeat1d ago

How .NET metadata tables work — and how a decompiler reads them

Open a .NET DLL in a hex editor and most of it is not code. Before the IL, before the resources, sits a compact relational database describing the assembly's own structure: its types, methods, fields,

6 min readdelta1labs.hashnode.dev

Zero Heartbeat1d ago

Decompiling yield return: rebuilding iterator blocks from IL

yield return is the quiet sibling of async/await. Both compile to a state machine; both replace the method you wrote with a generated class and an integer-driven MoveNext. But iterators came first — t

7 min readdelta1labs.hashnode.dev

Search Hashnode

Trending tags this week

Reading top-level statements in decompiled C#: the synthesized Program class and the Main entry point

Decompiling P/Invoke and DllImport: Reading a .NET Assembly''s Native Interop

Decompiling a Blazor WebAssembly App: Reading the .NET DLLs the Browser Downloaded

Decompiling ReadyToRun (R2R) Assemblies: Why Precompiled Native Code Still Decompiles Cleanly

Decompiling F#-Compiled Assemblies in a C# Decompiler: Reading Unions, Records, and Modules

Decompiling extension methods: the [Extension] attribute is the only trace, the receiver was just the first argument, and the call that looks static

Decompiling extension methods: the [Extension] attribute is the only trace, the receiver was just the first argument, and the call that looks static

How to decompile a .NET DLL to C# (2026 guide)

How .NET metadata tables work — and how a decompiler reads them

Decompiling yield return: rebuilding iterator blocks from IL