List_of_CIL_instructions

List of CIL instructions

Add article description

This is a list of the instructions in the instruction set of the Common Intermediate Language bytecode.

Opcode abbreviated from operation code is the portion of a machine language instruction that specifies the operation to be performed.
Base instructions form a Turing-complete instruction set.
Object model instructions provide an implementation for the Common Type System.

More information Opcode, Instruction ...

Opcode	Instruction	Description	Type of instruction
0x58	`add`	Add two values, returning a new value.	Base instruction
0xD6	`add.ovf`	Add signed integer values with overflow check.	Base instruction
0xD7	`add.ovf.un`	Add unsigned integer values with overflow check.	Base instruction
0x5F	`and`	Bitwise AND of two integral values, returns an integral value.	Base instruction
0xFE 0x00	`arglist`	Return argument list handle for the current method.	Base instruction
0x3B	`beq <int32 (target)>`	Branch to target if equal.	Base instruction
0x2E	`beq.s <int8 (target)>`	Branch to target if equal, short form.	Base instruction
0x3C	`bge <int32 (target)>`	Branch to target if greater than or equal to.	Base instruction
0x2F	`bge.s <int8 (target)>`	Branch to target if greater than or equal to, short form.	Base instruction
0x41	`bge.un <int32 (target)>`	Branch to target if greater than or equal to (unsigned or unordered).	Base instruction
0x34	`bge.un.s <int8 (target)>`	Branch to target if greater than or equal to (unsigned or unordered), short form.	Base instruction
0x3D	`bgt <int32 (target)>`	Branch to target if greater than.	Base instruction
0x30	`bgt.s <int8 (target)>`	Branch to target if greater than, short form.	Base instruction
0x42	`bgt.un <int32 (target)>`	Branch to target if greater than (unsigned or unordered).	Base instruction
0x35	`bgt.un.s <int8 (target)>`	Branch to target if greater than (unsigned or unordered), short form.	Base instruction
0x3E	`ble <int32 (target)>`	Branch to target if less than or equal to.	Base instruction
0x31	`ble.s <int8 (target)>`	Branch to target if less than or equal to, short form.	Base instruction
0x43	`ble.un <int32 (target)>`	Branch to target if less than or equal to (unsigned or unordered).	Base instruction
0x36	`ble.un.s <int8 (target)>`	Branch to target if less than or equal to (unsigned or unordered), short form.	Base instruction
0x3F	`blt <int32 (target)>`	Branch to target if less than.	Base instruction
0x32	`blt.s <int8 (target)>`	Branch to target if less than, short form.	Base instruction
0x44	`blt.un <int32 (target)>`	Branch to target if less than (unsigned or unordered).	Base instruction
0x37	`blt.un.s <int8 (target)>`	Branch to target if less than (unsigned or unordered), short form.	Base instruction
0x40	`bne.un <int32 (target)>`	Branch to target if unequal or unordered.	Base instruction
0x33	`bne.un.s <int8 (target)>`	Branch to target if unequal or unordered, short form.	Base instruction
0x8C	`box <typeTok>`	Convert a boxable value to its boxed form.	Object model instruction
0x38	`br <int32 (target)>`	Branch to target.	Base instruction
0x2B	`br.s <int8 (target)>`	Branch to target, short form.	Base instruction
0x01	`break`	Inform a debugger that a breakpoint has been reached.	Base instruction
0x39	`brfalse <int32 (target)>`	Branch to target if value is zero (false).	Base instruction
0x2C	`brfalse.s <int8 (target)>`	Branch to target if value is zero (false), short form.	Base instruction
0x3A	`brinst <int32 (target)>`	Branch to target if value is a non-null object reference (alias for brtrue).	Base instruction
0x2D	`brinst.s <int8 (target)>`	Branch to target if value is a non-null object reference, short form (alias for brtrue.s).	Base instruction
0x39	`brnull <int32 (target)>`	Branch to target if value is null (alias for brfalse).	Base instruction
0x2C	`brnull.s <int8 (target)>`	Branch to target if value is null (alias for brfalse.s), short form.	Base instruction
0x3A	`brtrue <int32 (target)>`	Branch to target if value is non-zero (true).	Base instruction
0x2D	`brtrue.s <int8 (target)>`	Branch to target if value is non-zero (true), short form.	Base instruction
0x39	`brzero <int32 (target)>`	Branch to target if value is zero (alias for brfalse).	Base instruction
0x2C	`brzero.s <int8 (target)>`	Branch to target if value is zero (alias for brfalse.s), short form.	Base instruction
0x28	`call <method>`	Call method described by method.	Base instruction
0x29	`calli <callsitedescr>`	Call method indicated on the stack with arguments described by callsitedescr.	Base instruction
0x6F	`callvirt <method>`	Call a method associated with an object.	Object model instruction
0x74	`castclass <class>`	Cast obj to class.	Object model instruction
0xFE 0x01	`ceq`	Push 1 (of type int32) if value1 equals value2, else push 0.	Base instruction
0xFE 0x02	`cgt`	Push 1 (of type int32) if value1 greater that value2, else push 0.	Base instruction
0xFE 0x03	`cgt.un`	Push 1 (of type int32) if value1 greater that value2, unsigned or unordered, else push 0.	Base instruction
0xC3	`ckfinite`	Throw ArithmeticException if value is not a finite number.	Base instruction
0xFE 0x04	`clt`	Push 1 (of type int32) if value1 lower than value2, else push 0.	Base instruction
0xFE 0x05	`clt.un`	Push 1 (of type int32) if value1 lower than value2, unsigned or unordered, else push 0.	Base instruction
0xFE 0x16	`constrained. <thisType>`	Call a virtual method on a type constrained to be type T.	Prefix to instruction
0xD3	`conv.i`	Convert to native int, pushing native int on stack.	Base instruction
0x67	`conv.i1`	Convert to int8, pushing int32 on stack.	Base instruction
0x68	`conv.i2`	Convert to int16, pushing int32 on stack.	Base instruction
0x69	`conv.i4`	Convert to int32, pushing int32 on stack.	Base instruction
0x6A	`conv.i8`	Convert to int64, pushing int64 on stack.	Base instruction
0xD4	`conv.ovf.i`	Convert to a native int (on the stack as native int) and throw an exception on overflow.	Base instruction
0x8A	`conv.ovf.i.un`	Convert unsigned to a native int (on the stack as native int) and throw an exception on overflow.	Base instruction
0xB3	`conv.ovf.i1`	Convert to an int8 (on the stack as int32) and throw an exception on overflow.	Base instruction
0x82	`conv.ovf.i1.un`	Convert unsigned to an int8 (on the stack as int32) and throw an exception on overflow.	Base instruction
0xB5	`conv.ovf.i2`	Convert to an int16 (on the stack as int32) and throw an exception on overflow.	Base instruction
0x83	`conv.ovf.i2.un`	Convert unsigned to an int16 (on the stack as int32) and throw an exception on overflow.	Base instruction
0xB7	`conv.ovf.i4`	Convert to an int32 (on the stack as int32) and throw an exception on overflow.	Base instruction
0x84	`conv.ovf.i4.un`	Convert unsigned to an int32 (on the stack as int32) and throw an exception on overflow.	Base instruction
0xB9	`conv.ovf.i8`	Convert to an int64 (on the stack as int64) and throw an exception on overflow.	Base instruction
0x85	`conv.ovf.i8.un`	Convert unsigned to an int64 (on the stack as int64) and throw an exception on overflow.	Base instruction
0xD5	`conv.ovf.u`	Convert to a native unsigned int (on the stack as native int) and throw an exception on overflow.	Base instruction
0x8B	`conv.ovf.u.un`	Convert unsigned to a native unsigned int (on the stack as native int) and throw an exception on overflow.	Base instruction
0xB4	`conv.ovf.u1`	Convert to an unsigned int8 (on the stack as int32) and throw an exception on overflow.	Base instruction
0x86	`conv.ovf.u1.un`	Convert unsigned to an unsigned int8 (on the stack as int32) and throw an exception on overflow.	Base instruction
0xB6	`conv.ovf.u2`	Convert to an unsigned int16 (on the stack as int32) and throw an exception on overflow.	Base instruction
0x87	`conv.ovf.u2.un`	Convert unsigned to an unsigned int16 (on the stack as int32) and throw an exception on overflow.	Base instruction
0xB8	`conv.ovf.u4`	Convert to an unsigned int32 (on the stack as int32) and throw an exception on overflow.	Base instruction
0x88	`conv.ovf.u4.un`	Convert unsigned to an unsigned int32 (on the stack as int32) and throw an exception on overflow.	Base instruction
0xBA	`conv.ovf.u8`	Convert to an unsigned int64 (on the stack as int64) and throw an exception on overflow.	Base instruction
0x89	`conv.ovf.u8.un`	Convert unsigned to an unsigned int64 (on the stack as int64) and throw an exception on overflow.	Base instruction
0x76	`conv.r.un`	Convert unsigned integer to floating-point, pushing F on stack.	Base instruction
0x6B	`conv.r4`	Convert to float32, pushing F on stack.	Base instruction
0x6C	`conv.r8`	Convert to float64, pushing F on stack.	Base instruction
0xE0	`conv.u`	Convert to native unsigned int, pushing native int on stack.	Base instruction
0xD2	`conv.u1`	Convert to unsigned int8, pushing int32 on stack.	Base instruction
0xD1	`conv.u2`	Convert to unsigned int16, pushing int32 on stack.	Base instruction
0x6D	`conv.u4`	Convert to unsigned int32, pushing int32 on stack.	Base instruction
0x6E	`conv.u8`	Convert to unsigned int64, pushing int64 on stack.	Base instruction
0xFE 0x17	`cpblk`	Copy data from memory to memory.	Base instruction
0x70	`cpobj <typeTok>`	Copy a value type from src to dest.	Object model instruction
0x5B	`div`	Divide two values to return a quotient or floating-point result.	Base instruction
0x5C	`div.un`	Divide two values, unsigned, returning a quotient.	Base instruction
0x25	`dup`	Duplicate the value on the top of the stack.	Base instruction
0xDC	`endfault`	End fault clause of an exception block.	Base instruction
0xFE 0x11	`endfilter`	End an exception handling filter clause.	Base instruction
0xDC	`endfinally`	End finally clause of an exception block.	Base instruction
0xFE 0x18	`initblk`	Set all bytes in a block of memory to a given byte value.	Base instruction
0xFE 0x15	`initobj <typeTok>`	Initialize the value at address dest.	Object model instruction
0x75	`isinst <class>`	Test if obj is an instance of class, returning null or an instance of that class or interface.	Object model instruction
0x27	`jmp <method>`	Exit current method and jump to the specified method.	Base instruction
0xFE 0x09	`ldarg <uint16 (num)>`	Load argument numbered num onto the stack.	Base instruction
0x02	`ldarg.0`	Load argument 0 onto the stack.	Base instruction
0x03	`ldarg.1`	Load argument 1 onto the stack.	Base instruction
0x04	`ldarg.2`	Load argument 2 onto the stack.	Base instruction
0x05	`ldarg.3`	Load argument 3 onto the stack.	Base instruction
0x0E	`ldarg.s <uint8 (num)>`	Load argument numbered num onto the stack, short form.	Base instruction
0xFE 0x0A	`ldarga <uint16 (argNum)>`	Fetch the address of argument argNum.	Base instruction
0x0F	`ldarga.s <uint8 (argNum)>`	Fetch the address of argument argNum, short form.	Base instruction
0x20	`ldc.i4 <int32 (num)>`	Push num of type int32 onto the stack as int32.	Base instruction
0x16	`ldc.i4.0`	Push 0 onto the stack as int32.	Base instruction
0x17	`ldc.i4.1`	Push 1 onto the stack as int32.	Base instruction
0x18	`ldc.i4.2`	Push 2 onto the stack as int32.	Base instruction
0x19	`ldc.i4.3`	Push 3 onto the stack as int32.	Base instruction
0x1A	`ldc.i4.4`	Push 4 onto the stack as int32.	Base instruction
0x1B	`ldc.i4.5`	Push 5 onto the stack as int32.	Base instruction
0x1C	`ldc.i4.6`	Push 6 onto the stack as int32.	Base instruction
0x1D	`ldc.i4.7`	Push 7 onto the stack as int32.	Base instruction
0x1E	`ldc.i4.8`	Push 8 onto the stack as int32.	Base instruction
0x15	`ldc.i4.m1`	Push -1 onto the stack as int32.	Base instruction
0x15	`ldc.i4.M1`	Push -1 onto the stack as int32 (alias for ldc.i4.m1).	Base instruction
0x1F	`ldc.i4.s <int8 (num)>`	Push num onto the stack as int32, short form.	Base instruction
0x21	`ldc.i8 <int64 (num)>`	Push num of type int64 onto the stack as int64.	Base instruction
0x22	`ldc.r4 <float32 (num)>`	Push num of type float32 onto the stack as F.	Base instruction
0x23	`ldc.r8 <float64 (num)>`	Push num of type float64 onto the stack as F.	Base instruction
0xA3	`ldelem <typeTok>`	Load the element at index onto the top of the stack.	Object model instruction
0x97	`ldelem.i`	Load the element with type native int at index onto the top of the stack as a native int.	Object model instruction
0x90	`ldelem.i1`	Load the element with type int8 at index onto the top of the stack as an int32.	Object model instruction
0x92	`ldelem.i2`	Load the element with type int16 at index onto the top of the stack as an int32.	Object model instruction
0x94	`ldelem.i4`	Load the element with type int32 at index onto the top of the stack as an int32.	Object model instruction
0x96	`ldelem.i8`	Load the element with type int64 at index onto the top of the stack as an int64.	Object model instruction
0x98	`ldelem.r4`	Load the element with type float32 at index onto the top of the stack as an F.	Object model instruction
0x99	`ldelem.r8`	Load the element with type float64 at index onto the top of the stack as an F.	Object model instruction
0x9A	`ldelem.ref`	Load the element at index onto the top of the stack as an O. The type of the O is the same as the element type of the array pushed on the CIL stack.	Object model instruction
0x91	`ldelem.u1`	Load the element with type unsigned int8 at index onto the top of the stack as an int32.	Object model instruction
0x93	`ldelem.u2`	Load the element with type unsigned int16 at index onto the top of the stack as an int32.	Object model instruction
0x95	`ldelem.u4`	Load the element with type unsigned int32 at index onto the top of the stack as an int32.	Object model instruction
0x96	`ldelem.u8`	Load the element with type unsigned int64 at index onto the top of the stack as an int64 (alias for ldelem.i8).	Object model instruction
0x8F	`ldelema <class>`	Load the address of element at index onto the top of the stack.	Object model instruction
0x7B	`ldfld <field>`	Push the value of field of object (or value type) obj, onto the stack.	Object model instruction
0x7C	`ldflda <field>`	Push the address of field of object obj on the stack.	Object model instruction
0xFE 0x06	`ldftn <method>`	Push a pointer to a method referenced by method, on the stack.	Base instruction
0x4D	`ldind.i`	Indirect load value of type native int as native int on the stack.	Base instruction
0x46	`ldind.i1`	Indirect load value of type int8 as int32 on the stack.	Base instruction
0x48	`ldind.i2`	Indirect load value of type int16 as int32 on the stack.	Base instruction
0x4A	`ldind.i4`	Indirect load value of type int32 as int32 on the stack.	Base instruction
0x4C	`ldind.i8`	Indirect load value of type int64 as int64 on the stack.	Base instruction
0x4E	`ldind.r4`	Indirect load value of type float32 as F on the stack.	Base instruction
0x4F	`ldind.r8`	Indirect load value of type float64 as F on the stack.	Base instruction
0x50	`ldind.ref`	Indirect load value of type object ref as O on the stack.	Base instruction
0x47	`ldind.u1`	Indirect load value of type unsigned int8 as int32 on the stack.	Base instruction
0x49	`ldind.u2`	Indirect load value of type unsigned int16 as int32 on the stack.	Base instruction
0x4B	`ldind.u4`	Indirect load value of type unsigned int32 as int32 on the stack.	Base instruction
0x4C	`ldind.u8`	Indirect load value of type unsigned int64 as int64 on the stack (alias for ldind.i8).	Base instruction
0x8E	`ldlen`	Push the length (of type native unsigned int) of array on the stack.	Object model instruction
0xFE 0x0C	`ldloc <uint16 (indx)>`	Load local variable of index indx onto stack.	Base instruction
0x06	`ldloc.0`	Load local variable 0 onto stack.	Base instruction
0x07	`ldloc.1`	Load local variable 1 onto stack.	Base instruction
0x08	`ldloc.2`	Load local variable 2 onto stack.	Base instruction
0x09	`ldloc.3`	Load local variable 3 onto stack.	Base instruction
0x11	`ldloc.s <uint8 (indx)>`	Load local variable of index indx onto stack, short form.	Base instruction
0xFE 0x0D	`ldloca <uint16 (indx)>`	Load address of local variable with index indx.	Base instruction
0x12	`ldloca.s <uint8 (indx)>`	Load address of local variable with index indx, short form.	Base instruction
0x14	`ldnull`	Push a null reference on the stack.	Base instruction
0x71	`ldobj <typeTok>`	Copy the value stored at address src to the stack.	Object model instruction
0x7E	`ldsfld <field>`	Push the value of the static field on the stack.	Object model instruction
0x7F	`ldsflda <field>`	Push the address of the static field, field, on the stack.	Object model instruction
0x72	`ldstr <string>`	Push a string object for the literal string.	Object model instruction
0xD0	`ldtoken <token>`	Convert metadata token to its runtime representation.	Object model instruction
0xFE 0x07	`ldvirtftn <method>`	Push address of virtual method on the stack.	Object model instruction
0xDD	`leave <int32 (target)>`	Exit a protected region of code.	Base instruction
0xDE	`leave.s <int8 (target)>`	Exit a protected region of code, short form.	Base instruction
0xFE 0x0F	`localloc`	Allocate space from the local memory pool.	Base instruction
0xC6	`mkrefany <class>`	Push a typed reference to ptr of type class onto the stack.	Object model instruction
0x5A	`mul`	Multiply values.	Base instruction
0xD8	`mul.ovf`	Multiply signed integer values. Signed result shall fit in same size.	Base instruction
0xD9	`mul.ovf.un`	Multiply unsigned integer values. Unsigned result shall fit in same size.	Base instruction
0x65	`neg`	Negate value.	Base instruction
0x8D	`newarr <etype>`	Create a new array with elements of type etype.	Object model instruction
0x73	`newobj <ctor>`	Allocate an uninitialized object or value type and call ctor.	Object model instruction
0xFE 0x19	no. { typecheck, rangecheck, nullcheck }	The specified fault check(s) normally performed as part of the execution of the subsequent instruction can/shall be skipped.	Prefix to instruction
0x00	`nop`	Do nothing (No operation).	Base instruction
0x66	`not`	Bitwise complement.	Base instruction
0x60	`or`	Bitwise OR of two integer values, returns an integer.	Base instruction
0x26	`pop`	Pop value from the stack.	Base instruction
0xFE 0x1E	`readonly.`	Specify that the subsequent array address operation performs no type check at runtime, and that it returns a controlled-mutability managed pointer.	Prefix to instruction
0xFE 0x1D	`refanytype`	Push the type token stored in a typed reference.	Object model instruction
0xC2	`refanyval <type>`	Push the address stored in a typed reference.	Object model instruction
0x5D	`rem`	Remainder when dividing one value by another.	Base instruction
0x5E	`rem.un`	Remainder when dividing one unsigned value by another.	Base instruction
0x2A	`ret`	Return from method, possibly with a value.	Base instruction
0xFE 0x1A	`rethrow`	Rethrow the current exception.	Object model instruction
0x62	`shl`	Shift an integer left (shifting in zeros), return an integer.	Base instruction
0x63	`shr`	Shift an integer right (shift in sign), return an integer.	Base instruction
0x64	`shr.un`	Shift an integer right (shift in zero), return an integer.	Base instruction
0xFE 0x1C	`sizeof <typeTok>`	Push the size, in bytes, of a type as an unsigned int32.	Object model instruction
0xFE 0x0B	`starg <uint16 (num)>`	Store value to the argument numbered num.	Base instruction
0x10	`starg.s <uint8 (num)>`	Store value to the argument numbered num, short form.	Base instruction
0xA4	`stelem <typeTok>`	Replace array element at index with the value on the stack.	Object model instruction
0x9B	`stelem.i`	Replace array element at index with the native int value on the stack.	Object model instruction
0x9C	`stelem.i1`	Replace array element at index with the int8 value on the stack.	Object model instruction
0x9D	`stelem.i2`	Replace array element at index with the int16 value on the stack.	Object model instruction
0x9E	`stelem.i4`	Replace array element at index with the int32 value on the stack.	Object model instruction
0x9F	`stelem.i8`	Replace array element at index with the int64 value on the stack.	Object model instruction
0xA0	`stelem.r4`	Replace array element at index with the float32 value on the stack.	Object model instruction
0xA1	`stelem.r8`	Replace array element at index with the float64 value on the stack.	Object model instruction
0xA2	`stelem.ref`	Replace array element at index with the ref value on the stack.	Object model instruction
0x7D	`stfld <field>`	Replace the value of field of the object obj with value.	Object model instruction
0xDF	`stind.i`	Store value of type native int into memory at address.	Base instruction
0x52	`stind.i1`	Store value of type int8 into memory at address.	Base instruction
0x53	`stind.i2`	Store value of type int16 into memory at address.	Base instruction
0x54	`stind.i4`	Store value of type int32 into memory at address.	Base instruction
0x55	`stind.i8`	Store value of type int64 into memory at address.	Base instruction
0x56	`stind.r4`	Store value of type float32 into memory at address.	Base instruction
0x57	`stind.r8`	Store value of type float64 into memory at address.	Base instruction
0x51	`stind.ref`	Store value of type object ref (type O) into memory at address.	Base instruction
0xFE 0x0E	`stloc <uint16 (indx)>`	Pop a value from stack into local variable indx.	Base instruction
0x0A	`stloc.0`	Pop a value from stack into local variable 0.	Base instruction
0x0B	`stloc.1`	Pop a value from stack into local variable 1.	Base instruction
0x0C	`stloc.2`	Pop a value from stack into local variable 2.	Base instruction
0x0D	`stloc.3`	Pop a value from stack into local variable 3.	Base instruction
0x13	`stloc.s <uint8 (indx)>`	Pop a value from stack into local variable indx, short form.	Base instruction
0x81	`stobj <typeTok>`	Store a value of type typeTok at an address.	Object model instruction
0x80	`stsfld <field>`	Replace the value of the static field with val.	Object model instruction
0x59	`sub`	Subtract value2 from value1, returning a new value.	Base instruction
0xDA	`sub.ovf`	Subtract native int from a native int. Signed result shall fit in same size.	Base instruction
0xDB	`sub.ovf.un`	Subtract native unsigned int from a native unsigned int. Unsigned result shall fit in same size.	Base instruction
0x45	`switch <uint32, int32, int32 (t1..tN)>`	Jump to one of n values.	Base instruction
0xFE 0x14	`tail.`	Subsequent call terminates current method.	Prefix to instruction
0x7A	`throw`	Throw an exception.	Object model instruction
0xFE 0x12	`unaligned. (alignment)`	Subsequent pointer instruction might be unaligned.	Prefix to instruction
0x79	`unbox <valuetype>`	Extract a value-type from obj, its boxed representation, and push a controlled-mutability managed pointer to it to the top of the stack.	Object model instruction
0xA5	`unbox.any <typeTok>`	Extract a value-type from obj, its boxed representation, and copy to the top of the stack.	Object model instruction
0xFE 0x13	`volatile.`	Subsequent pointer reference is volatile.	Prefix to instruction
0x61	`xor`	Bitwise XOR of integer values, returns an integer.	Base instruction

Share this article:

This article uses material from the Wikipedia article List_of_CIL_instructions, and is written by contributors. Text is available under a CC BY-SA 4.0 International License; additional terms may apply. Images, videos and audio are available under their respective licenses.

List_of_CIL_instructions

List of CIL instructions

See also

References

Share this article: