The op code portion of many important x86 instructions like MOV and ADD has the last two bits standardized as a direction bit and a data size bit:
Is there any pattern to the part of the op code shown in gray here? For example, for ADD some of the instructions use the code 000000 and others have code 100000.
000ss11p
wheress
indicates the segment register (00 = es, 01 = cs, 10 = ss, 11 = ds) andp
indicates if its a push or a pop (0 = push, 1 = pop). – Murtha