# ilspycmd
# Command-line .NET decompiler (CLI version of ILSpy)
# FOR610 Labs: 4.8 | Sections: 4

% dotnet, decompiler, cli

# Basic usage
ilspycmd assembly.exe > decompiled.cs


# --- Recipes (multi-tool chains) ---

# >> Decompile .NET on Command Line
# Decompile to C# source
ilspycmd <assembly.exe> > source.cs
# Search for suspicious patterns
grep -n 'Assembly.Load\|WebClient\|Process.Start' source.cs
# If obfuscated, deobfuscate first
de4dot <assembly.exe>
ilspycmd <assembly-cleaned.exe> > source_clean.cs