I can't say for sure, but I'd assume that he manually decompiled the code in the framework.