ILSpy review: a .NET decompiler

[Deep900]

ILSpy homepage: https://github.com/icsharpcode/ILSpy

ILSpy is a freeware and simple .NET decompiler which can be used also for example for static malware analysis of .NET malware samples, because we can see the source code of loaded .NET assemblies.

When we open ILSpy we can see the main window:





To load a .NET assembly simply click to "File" menu and we can also save code and reload the decompiler:



If we click on "View" we can sort assembly list by name and we can search in the source code.



If we click on "Help" menu we can check for new updates or look at "About" window.



We can decompile C#, VB and IL assemblies:



In the options we can set decompile settings, like "Decompile anonymous methods", "Decompile async methods", etc.

An interesting option we can see is that we can also show/hide XML documentation of the source code.



We can also set text style of the source code:



You can set text size, show line numbers in the source code, show metadata tokens, enable word wrap and choose the font.

ILSpy latest release: https://github.com/icsharpcode/ILSpy/releases