| Opcode | Instruction | Description | Type of instruction |
|---|
| 0x58 | add | Add two values, returning a new value. | Base instruction |
| 0xD6 | add.ovf | Add signed integer values with overflow check. | Base instruction |
| 0xD7 | add.ovf.un | Add unsigned integer values with overflow check. | Base instruction |
| 0x5F | and | Bitwise AND of two integral values, returns an integral value. | Base instruction |
| 0xFE 0x00 | arglist | Return argument list handle for the current method. | Base instruction |
| 0x3B | beq <int32 (target)> | Branch to target if equal. | Base instruction |
| 0x2E | beq.s <int8 (target)> | Branch to target if equal, short form. | Base instruction |
| 0x3C | bge <int32 (target)> | Branch to target if greater than or equal to. | Base instruction |
| 0x2F | bge.s <int8 (target)> | Branch to target if greater than or equal to, short form. | Base instruction |
| 0x41 | bge.un <int32 (target)> | Branch to target if greater than or equal to (unsigned or unordered). | Base instruction |
| 0x34 | bge.un.s <int8 (target)> | Branch to target if greater than or equal to (unsigned or unordered), short form. | Base instruction |
| 0x3D | bgt <int32 (target)> | Branch to target if greater than. | Base instruction |
| 0x30 | bgt.s <int8 (target)> | Branch to target if greater than, short form. | Base instruction |
| 0x42 | bgt.un <int32 (target)> | Branch to target if greater than (unsigned or unordered). | Base instruction |
| 0x35 | bgt.un.s <int8 (target)> | Branch to target if greater than (unsigned or unordered), short form. | Base instruction |
| 0x3E | ble <int32 (target)> | Branch to target if less than or equal to. | Base instruction |
| 0x31 | ble.s <int8 (target)> | Branch to target if less than or equal to, short form. | Base instruction |
| 0x43 | ble.un <int32 (target)> | Branch to target if less than or equal to (unsigned or unordered). | Base instruction |
| 0x36 | ble.un.s <int8 (target)> | Branch to target if less than or equal to (unsigned or unordered), short form. | Base instruction |
| 0x3F | blt <int32 (target)> | Branch to target if less than. | Base instruction |
| 0x32 | blt.s <int8 (target)> | Branch to target if less than, short form. | Base instruction |
| 0x44 | blt.un <int32 (target)> | Branch to target if less than (unsigned or unordered). | Base instruction |
| 0x37 | blt.un.s <int8 (target)> | Branch to target if less than (unsigned or unordered), short form. | Base instruction |
| 0x40 | bne.un <int32 (target)> | Branch to target if unequal or unordered. | Base instruction |
| 0x33 | bne.un.s <int8 (target)> | Branch to target if unequal or unordered, short form. | Base instruction |
| 0x8C | box <typeTok> | Convert a boxable value to its boxed form. | Object model instruction |
| 0x38 | br <int32 (target)> | Branch to target. | Base instruction |
| 0x2B | br.s <int8 (target)> | Branch to target, short form. | Base instruction |
| 0x01 | break | Inform a debugger that a breakpoint has been reached. | Base instruction |
| 0x39 | brfalse <int32 (target)> | Branch to target if value is zero (false). | Base instruction |
| 0x2C | brfalse.s <int8 (target)> | Branch to target if value is zero (false), short form. | Base instruction |
| 0x3A | brinst <int32 (target)> | Branch to target if value is a non-null object reference (alias for brtrue). | Base instruction |
| 0x2D | brinst.s <int8 (target)> | Branch to target if value is a non-null object reference, short form (alias for brtrue.s). | Base instruction |
| 0x39 | brnull <int32 (target)> | Branch to target if value is null (alias for brfalse). | Base instruction |
| 0x2C | brnull.s <int8 (target)> | Branch to target if value is null (alias for brfalse.s), short form. | Base instruction |
| 0x3A | brtrue <int32 (target)> | Branch to target if value is non-zero (true). | Base instruction |
| 0x2D | brtrue.s <int8 (target)> | Branch to target if value is non-zero (true), short form. | Base instruction |
| 0x39 | brzero <int32 (target)> | Branch to target if value is zero (alias for brfalse). | Base instruction |
| 0x2C | brzero.s <int8 (target)> | Branch to target if value is zero (alias for brfalse.s), short form. | Base instruction |
| 0x28 | call <method> | Call method described by method. | Base instruction |
| 0x29 | calli <callsitedescr> | Call method indicated on the stack with arguments described by callsitedescr. | Base instruction |
| 0x6F | callvirt <method> | Call a method associated with an object. | Object model instruction |
| 0x74 | castclass <class> | Cast obj to class. | Object model instruction |
| 0xFE 0x01 | ceq | Push 1 (of type int32) if value1 equals value2, else push 0. | Base instruction |
| 0xFE 0x02 | cgt | Push 1 (of type int32) if value1 greater that value2, else push 0. | Base instruction |
| 0xFE 0x03 | cgt.un | Push 1 (of type int32) if value1 greater that value2, unsigned or unordered, else push 0. | Base instruction |
| 0xC3 | ckfinite | Throw ArithmeticException if value is not a finite number. | Base instruction |
| 0xFE 0x04 | clt | Push 1 (of type int32) if value1 lower than value2, else push 0. | Base instruction |
| 0xFE 0x05 | clt.un | Push 1 (of type int32) if value1 lower than value2, unsigned or unordered, else push 0. | Base instruction |
| 0xFE 0x16 | constrained. <thisType> | Call a virtual method on a type constrained to be type T. | Prefix to instruction |
| 0xD3 | conv.i | Convert to native int, pushing native int on stack. | Base instruction |
| 0x67 | conv.i1 | Convert to int8, pushing int32 on stack. | Base instruction |
| 0x68 | conv.i2 | Convert to int16, pushing int32 on stack. | Base instruction |
| 0x69 | conv.i4 | Convert to int32, pushing int32 on stack. | Base instruction |
| 0x6A | conv.i8 | Convert to int64, pushing int64 on stack. | Base instruction |
| 0xD4 | conv.ovf.i | Convert to a native int (on the stack as native int) and throw an exception on overflow. | Base instruction |
| 0x8A | conv.ovf.i.un | Convert unsigned to a native int (on the stack as native int) and throw an exception on overflow. | Base instruction |
| 0xB3 | conv.ovf.i1 | Convert to an int8 (on the stack as int32) and throw an exception on overflow. | Base instruction |
| 0x82 | conv.ovf.i1.un | Convert unsigned to an int8 (on the stack as int32) and throw an exception on overflow. | Base instruction |
| 0xB5 | conv.ovf.i2 | Convert to an int16 (on the stack as int32) and throw an exception on overflow. | Base instruction |
| 0x83 | conv.ovf.i2.un | Convert unsigned to an int16 (on the stack as int32) and throw an exception on overflow. | Base instruction |
| 0xB7 | conv.ovf.i4 | Convert to an int32 (on the stack as int32) and throw an exception on overflow. | Base instruction |
| 0x84 | conv.ovf.i4.un | Convert unsigned to an int32 (on the stack as int32) and throw an exception on overflow. | Base instruction |
| 0xB9 | conv.ovf.i8 | Convert to an int64 (on the stack as int64) and throw an exception on overflow. | Base instruction |
| 0x85 | conv.ovf.i8.un | Convert unsigned to an int64 (on the stack as int64) and throw an exception on overflow. | Base instruction |
| 0xD5 | conv.ovf.u | Convert to a native unsigned int (on the stack as native int) and throw an exception on overflow. | Base instruction |
| 0x8B | conv.ovf.u.un | Convert unsigned to a native unsigned int (on the stack as native int) and throw an exception on overflow. | Base instruction |
| 0xB4 | conv.ovf.u1 | Convert to an unsigned int8 (on the stack as int32) and throw an exception on overflow. | Base instruction |
| 0x86 | conv.ovf.u1.un | Convert unsigned to an unsigned int8 (on the stack as int32) and throw an exception on overflow. | Base instruction |
| 0xB6 | conv.ovf.u2 | Convert to an unsigned int16 (on the stack as int32) and throw an exception on overflow. | Base instruction |
| 0x87 | conv.ovf.u2.un | Convert unsigned to an unsigned int16 (on the stack as int32) and throw an exception on overflow. | Base instruction |
| 0xB8 | conv.ovf.u4 | Convert to an unsigned int32 (on the stack as int32) and throw an exception on overflow. | Base instruction |
| 0x88 | conv.ovf.u4.un | Convert unsigned to an unsigned int32 (on the stack as int32) and throw an exception on overflow. | Base instruction |
| 0xBA | conv.ovf.u8 | Convert to an unsigned int64 (on the stack as int64) and throw an exception on overflow. | Base instruction |
| 0x89 | conv.ovf.u8.un | Convert unsigned to an unsigned int64 (on the stack as int64) and throw an exception on overflow. | Base instruction |
| 0x76 | conv.r.un | Convert unsigned integer to floating-point, pushing F on stack. | Base instruction |
| 0x6B | conv.r4 | Convert to float32, pushing F on stack. | Base instruction |
| 0x6C | conv.r8 | Convert to float64, pushing F on stack. | Base instruction |
| 0xE0 | conv.u | Convert to native unsigned int, pushing native int on stack. | Base instruction |
| 0xD2 | conv.u1 | Convert to unsigned int8, pushing int32 on stack. | Base instruction |
| 0xD1 | conv.u2 | Convert to unsigned int16, pushing int32 on stack. | Base instruction |
| 0x6D | conv.u4 | Convert to unsigned int32, pushing int32 on stack. | Base instruction |
| 0x6E | conv.u8 | Convert to unsigned int64, pushing int64 on stack. | Base instruction |
| 0xFE 0x17 | cpblk | Copy data from memory to memory. | Base instruction |
| 0x70 | cpobj <typeTok> | Copy a value type from src to dest. | Object model instruction |
| 0x5B | div | Divide two values to return a quotient or floating-point result. | Base instruction |
| 0x5C | div.un | Divide two values, unsigned, returning a quotient. | Base instruction |
| 0x25 | dup | Duplicate the value on the top of the stack. | Base instruction |
| 0xDC | endfault | End fault clause of an exception block. | Base instruction |
| 0xFE 0x11 | endfilter | End an exception handling filter clause. | Base instruction |
| 0xDC | endfinally | End finally clause of an exception block. | Base instruction |
| 0xFE 0x18 | initblk | Set all bytes in a block of memory to a given byte value. | Base instruction |
| 0xFE 0x15 | initobj <typeTok> | Initialize the value at address dest. | Object model instruction |
| 0x75 | isinst <class> | Test if obj is an instance of class, returning null or an instance of that class or interface. | Object model instruction |
| 0x27 | jmp <method> | Exit current method and jump to the specified method. | Base instruction |
| 0xFE 0x09 | ldarg <uint16 (num)> | Load argument numbered num onto the stack. | Base instruction |
| 0x02 | ldarg.0 | Load argument 0 onto the stack. | Base instruction |
| 0x03 | ldarg.1 | Load argument 1 onto the stack. | Base instruction |
| 0x04 | ldarg.2 | Load argument 2 onto the stack. | Base instruction |
| 0x05 | ldarg.3 | Load argument 3 onto the stack. | Base instruction |
| 0x0E | ldarg.s <uint8 (num)> | Load argument numbered num onto the stack, short form. | Base instruction |
| 0xFE 0x0A | ldarga <uint16 (argNum)> | Fetch the address of argument argNum. | Base instruction |
| 0x0F | ldarga.s <uint8 (argNum)> | Fetch the address of argument argNum, short form. | Base instruction |
| 0x20 | ldc.i4 <int32 (num)> | Push num of type int32 onto the stack as int32. | Base instruction |
| 0x16 | ldc.i4.0 | Push 0 onto the stack as int32. | Base instruction |
| 0x17 | ldc.i4.1 | Push 1 onto the stack as int32. | Base instruction |
| 0x18 | ldc.i4.2 | Push 2 onto the stack as int32. | Base instruction |
| 0x19 | ldc.i4.3 | Push 3 onto the stack as int32. | Base instruction |
| 0x1A | ldc.i4.4 | Push 4 onto the stack as int32. | Base instruction |
| 0x1B | ldc.i4.5 | Push 5 onto the stack as int32. | Base instruction |
| 0x1C | ldc.i4.6 | Push 6 onto the stack as int32. | Base instruction |
| 0x1D | ldc.i4.7 | Push 7 onto the stack as int32. | Base instruction |
| 0x1E | ldc.i4.8 | Push 8 onto the stack as int32. | Base instruction |
| 0x15 | ldc.i4.m1 | Push -1 onto the stack as int32. | Base instruction |
| 0x15 | ldc.i4.M1 | Push -1 onto the stack as int32 (alias for ldc.i4.m1). | Base instruction |
| 0x1F | ldc.i4.s <int8 (num)> | Push num onto the stack as int32, short form. | Base instruction |
| 0x21 | ldc.i8 <int64 (num)> | Push num of type int64 onto the stack as int64. | Base instruction |
| 0x22 | ldc.r4 <float32 (num)> | Push num of type float32 onto the stack as F. | Base instruction |
| 0x23 | ldc.r8 <float64 (num)> | Push num of type float64 onto the stack as F. | Base instruction |
| 0xA3 | ldelem <typeTok> | Load the element at index onto the top of the stack. | Object model instruction |
| 0x97 | ldelem.i | Load the element with type native int at index onto the top of the stack as a native int. | Object model instruction |
| 0x90 | ldelem.i1 | Load the element with type int8 at index onto the top of the stack as an int32. | Object model instruction |
| 0x92 | ldelem.i2 | Load the element with type int16 at index onto the top of the stack as an int32. | Object model instruction |
| 0x94 | ldelem.i4 | Load the element with type int32 at index onto the top of the stack as an int32. | Object model instruction |
| 0x96 | ldelem.i8 | Load the element with type int64 at index onto the top of the stack as an int64. | Object model instruction |
| 0x98 | ldelem.r4 | Load the element with type float32 at index onto the top of the stack as an F. | Object model instruction |
| 0x99 | ldelem.r8 | Load the element with type float64 at index onto the top of the stack as an F. | Object model instruction |
| 0x9A | ldelem.ref | Load the element at index onto the top of the stack as an O. The type of the O is the same as the element type of the array pushed on the CIL stack. | Object model instruction |
| 0x91 | ldelem.u1 | Load the element with type unsigned int8 at index onto the top of the stack as an int32. | Object model instruction |
| 0x93 | ldelem.u2 | Load the element with type unsigned int16 at index onto the top of the stack as an int32. | Object model instruction |
| 0x95 | ldelem.u4 | Load the element with type unsigned int32 at index onto the top of the stack as an int32. | Object model instruction |
| 0x96 | ldelem.u8 | Load the element with type unsigned int64 at index onto the top of the stack as an int64 (alias for ldelem.i8). | Object model instruction |
| 0x8F | ldelema <class> | Load the address of element at index onto the top of the stack. | Object model instruction |
| 0x7B | ldfld <field> | Push the value of field of object (or value type) obj, onto the stack. | Object model instruction |
| 0x7C | ldflda <field> | Push the address of field of object obj on the stack. | Object model instruction |
| 0xFE 0x06 | ldftn <method> | Push a pointer to a method referenced by method, on the stack. | Base instruction |
| 0x4D | ldind.i | Indirect load value of type native int as native int on the stack. | Base instruction |
| 0x46 | ldind.i1 | Indirect load value of type int8 as int32 on the stack. | Base instruction |
| 0x48 | ldind.i2 | Indirect load value of type int16 as int32 on the stack. | Base instruction |
| 0x4A | ldind.i4 | Indirect load value of type int32 as int32 on the stack. | Base instruction |
| 0x4C | ldind.i8 | Indirect load value of type int64 as int64 on the stack. | Base instruction |
| 0x4E | ldind.r4 | Indirect load value of type float32 as F on the stack. | Base instruction |
| 0x4F | ldind.r8 | Indirect load value of type float64 as F on the stack. | Base instruction |
| 0x50 | ldind.ref | Indirect load value of type object ref as O on the stack. | Base instruction |
| 0x47 | ldind.u1 | Indirect load value of type unsigned int8 as int32 on the stack. | Base instruction |
| 0x49 | ldind.u2 | Indirect load value of type unsigned int16 as int32 on the stack. | Base instruction |
| 0x4B | ldind.u4 | Indirect load value of type unsigned int32 as int32 on the stack. | Base instruction |
| 0x4C | ldind.u8 | Indirect load value of type unsigned int64 as int64 on the stack (alias for ldind.i8). | Base instruction |
| 0x8E | ldlen | Push the length (of type native unsigned int) of array on the stack. | Object model instruction |
| 0xFE 0x0C | ldloc <uint16 (indx)> | Load local variable of index indx onto stack. | Base instruction |
| 0x06 | ldloc.0 | Load local variable 0 onto stack. | Base instruction |
| 0x07 | ldloc.1 | Load local variable 1 onto stack. | Base instruction |
| 0x08 | ldloc.2 | Load local variable 2 onto stack. | Base instruction |
| 0x09 | ldloc.3 | Load local variable 3 onto stack. | Base instruction |
| 0x11 | ldloc.s <uint8 (indx)> | Load local variable of index indx onto stack, short form. | Base instruction |
| 0xFE 0x0D | ldloca <uint16 (indx)> | Load address of local variable with index indx. | Base instruction |
| 0x12 | ldloca.s <uint8 (indx)> | Load address of local variable with index indx, short form. | Base instruction |
| 0x14 | ldnull | Push a null reference on the stack. | Base instruction |
| 0x71 | ldobj <typeTok> | Copy the value stored at address src to the stack. | Object model instruction |
| 0x7E | ldsfld <field> | Push the value of the static field on the stack. | Object model instruction |
| 0x7F | ldsflda <field> | Push the address of the static field, field, on the stack. | Object model instruction |
| 0x72 | ldstr <string> | Push a string object for the literal string. | Object model instruction |
| 0xD0 | ldtoken <token> | Convert metadata token to its runtime representation. | Object model instruction |
| 0xFE 0x07 | ldvirtftn <method> | Push address of virtual method on the stack. | Object model instruction |
| 0xDD | leave <int32 (target)> | Exit a protected region of code. | Base instruction |
| 0xDE | leave.s <int8 (target)> | Exit a protected region of code, short form. | Base instruction |
| 0xFE 0x0F | localloc | Allocate space from the local memory pool. | Base instruction |
| 0xC6 | mkrefany <class> | Push a typed reference to ptr of type class onto the stack. | Object model instruction |
| 0x5A | mul | Multiply values. | Base instruction |
| 0xD8 | mul.ovf | Multiply signed integer values. Signed result shall fit in same size. | Base instruction |
| 0xD9 | mul.ovf.un | Multiply unsigned integer values. Unsigned result shall fit in same size. | Base instruction |
| 0x65 | neg | Negate value. | Base instruction |
| 0x8D | newarr <etype> | Create a new array with elements of type etype. | Object model instruction |
| 0x73 | newobj <ctor> | Allocate an uninitialized object or value type and call ctor. | Object model instruction |
| 0xFE 0x19 | no. { typecheck, rangecheck, nullcheck } | The specified fault check(s) normally performed as part of the execution of the subsequent instruction can/shall be skipped. | Prefix to instruction |
| 0x00 | nop | Do nothing (No operation). | Base instruction |
| 0x66 | not | Bitwise complement. | Base instruction |
| 0x60 | or | Bitwise OR of two integer values, returns an integer. | Base instruction |
| 0x26 | pop | Pop value from the stack. | Base instruction |
| 0xFE 0x1E | readonly. | Specify that the subsequent array address operation performs no type check at runtime, and that it returns a controlled-mutability managed pointer. | Prefix to instruction |
| 0xFE 0x1D | refanytype | Push the type token stored in a typed reference. | Object model instruction |
| 0xC2 | refanyval <type> | Push the address stored in a typed reference. | Object model instruction |
| 0x5D | rem | Remainder when dividing one value by another. | Base instruction |
| 0x5E | rem.un | Remainder when dividing one unsigned value by another. | Base instruction |
| 0x2A | ret | Return from method, possibly with a value. | Base instruction |
| 0xFE 0x1A | rethrow | Rethrow the current exception. | Object model instruction |
| 0x62 | shl | Shift an integer left (shifting in zeros), return an integer. | Base instruction |
| 0x63 | shr | Shift an integer right (shift in sign), return an integer. | Base instruction |
| 0x64 | shr.un | Shift an integer right (shift in zero), return an integer. | Base instruction |
| 0xFE 0x1C | sizeof <typeTok> | Push the size, in bytes, of a type as an unsigned int32. | Object model instruction |
| 0xFE 0x0B | starg <uint16 (num)> | Store value to the argument numbered num. | Base instruction |
| 0x10 | starg.s <uint8 (num)> | Store value to the argument numbered num, short form. | Base instruction |
| 0xA4 | stelem <typeTok> | Replace array element at index with the value on the stack. | Object model instruction |
| 0x9B | stelem.i | Replace array element at index with the native int value on the stack. | Object model instruction |
| 0x9C | stelem.i1 | Replace array element at index with the int8 value on the stack. | Object model instruction |
| 0x9D | stelem.i2 | Replace array element at index with the int16 value on the stack. | Object model instruction |
| 0x9E | stelem.i4 | Replace array element at index with the int32 value on the stack. | Object model instruction |
| 0x9F | stelem.i8 | Replace array element at index with the int64 value on the stack. | Object model instruction |
| 0xA0 | stelem.r4 | Replace array element at index with the float32 value on the stack. | Object model instruction |
| 0xA1 | stelem.r8 | Replace array element at index with the float64 value on the stack. | Object model instruction |
| 0xA2 | stelem.ref | Replace array element at index with the ref value on the stack. | Object model instruction |
| 0x7D | stfld <field> | Replace the value of field of the object obj with value. | Object model instruction |
| 0xDF | stind.i | Store value of type native int into memory at address. | Base instruction |
| 0x52 | stind.i1 | Store value of type int8 into memory at address. | Base instruction |
| 0x53 | stind.i2 | Store value of type int16 into memory at address. | Base instruction |
| 0x54 | stind.i4 | Store value of type int32 into memory at address. | Base instruction |
| 0x55 | stind.i8 | Store value of type int64 into memory at address. | Base instruction |
| 0x56 | stind.r4 | Store value of type float32 into memory at address. | Base instruction |
| 0x57 | stind.r8 | Store value of type float64 into memory at address. | Base instruction |
| 0x51 | stind.ref | Store value of type object ref (type O) into memory at address. | Base instruction |
| 0xFE 0x0E | stloc <uint16 (indx)> | Pop a value from stack into local variable indx. | Base instruction |
| 0x0A | stloc.0 | Pop a value from stack into local variable 0. | Base instruction |
| 0x0B | stloc.1 | Pop a value from stack into local variable 1. | Base instruction |
| 0x0C | stloc.2 | Pop a value from stack into local variable 2. | Base instruction |
| 0x0D | stloc.3 | Pop a value from stack into local variable 3. | Base instruction |
| 0x13 | stloc.s <uint8 (indx)> | Pop a value from stack into local variable indx, short form. | Base instruction |
| 0x81 | stobj <typeTok> | Store a value of type typeTok at an address. | Object model instruction |
| 0x80 | stsfld <field> | Replace the value of the static field with val. | Object model instruction |
| 0x59 | sub | Subtract value2 from value1, returning a new value. | Base instruction |
| 0xDA | sub.ovf | Subtract native int from a native int. Signed result shall fit in same size. | Base instruction |
| 0xDB | sub.ovf.un | Subtract native unsigned int from a native unsigned int. Unsigned result shall fit in same size. | Base instruction |
| 0x45 | switch <uint32, int32, int32 (t1..tN)> | Jump to one of n values. | Base instruction |
| 0xFE 0x14 | tail. | Subsequent call terminates current method. | Prefix to instruction |
| 0x7A | throw | Throw an exception. | Object model instruction |
| 0xFE 0x12 | unaligned. (alignment) | Subsequent pointer instruction might be unaligned. | Prefix to instruction |
| 0x79 | unbox <valuetype> | Extract a value-type from obj, its boxed representation, and push a controlled-mutability managed pointer to it to the top of the stack. | Object model instruction |
| 0xA5 | unbox.any <typeTok> | Extract a value-type from obj, its boxed representation, and copy to the top of the stack. | Object model instruction |
| 0xFE 0x13 | volatile. | Subsequent pointer reference is volatile. | Prefix to instruction |
| 0x61 | xor | Bitwise XOR of integer values, returns an integer. | Base instruction |
|
