Wout Mertens' Guide To Keyboard Programming v1.1 Complete
Download a ZIP of this document and it's accompanying source code.
Table of Contents
컴컴컴컴컴컴컴컴�
0 Legal Info
0.1 Preface
1 Overall Information
1.1 Extended ASCII
1.2 Special Functions
2 DOS Interfacing
2.1 Functions
3 BIOS Interfacing
3.1 Functions
3.2 Keyboard Flags
3.3 Keyboard Buffer
4 Low-Level Interfacing
4.1 Interfacing And Configuring
4.2 Lay-Out
4.3 Scancodes
4.4 Int 9
5 Tech Stuff
A Acknowledgments
B How To Contact Me
C The Answer To Life, The Universe And All The Rest
D History
0. Legal Info
컴컴컴컴컴컴�
This "Keyboard Guide" is (C) Copyright 1994 Wout Mertens.
All rights reserved.
THIS DOCUMENT AND THE ACCOMPANYING SOURCE CODE FILES ARE PROVIDED "AS
IS" WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING ANY
WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. WOUT
MERTENS WILL NOT BE HELD LIABLE FOR ANY DAMAGES OR LOSSES OF ANY KIND
THAT RESULT FROM THE USE OR THE INABILITY TO USE THE INFORMATION
PROVIDED IN THIS DOCUMENT OR THIS SOURCE CODE FILE, INCLUDING, BUT NOT
LIMITED TO, LOSS OF PROPERTY OR INCOME.
This document and its accompanying source code files are freeware, not
public domain. They may be distributed freely provided that neither
file is modified, and that they are distributed together along with
FILE_ID.DIZ in their entirety, including the legal notice, and that:
If they are distributed by a third party vendor, no more than $5 U.S. is
charged for the disk on which the archive, containing this document and
the accompanying source code files, is stored, except when distributed
on CD-ROM.
This legal information supersedes all previous notices.
0.1. Preface
컴컴컴컴컴컴
I wrote this document because I needed info, and thought I could get it
this way. Boy was I wrong! I ended up finding it all by myself. Anyway,
I hope you can use it. It is meant for people who know what interrupts
are and that 0ah equals 10. Enjoy.
Oh, almost forgot. I didn't give this text any page formatting (aside
from spaces before and room after for ease of reading) because:
- I read ALL my documents on-line
- People have differing page sizes and then it would look like
shit for some people and too short for others.
If you want to print this, well, go ahead and format it, BUT DON'T EVEN
*THINK* OF SPREADING IT !!! (Except when you ask my permission)
Everytime you see something like d9h or 65h, it is a hexadecimal
number. No trailing 0 was added for ease of typing.
1. Overall Information
컴컴컴컴컴컴컴컴컴컴컴
On the IBM, there are three ways, all alike, to access the keyboard.
Via the operating system, via BIOS or via low-level access. Which way
you use depends very much on the application you are writing. Games do
not use DOS functions, for example. And a file-compressor is really not
interested wether you are actually pressing 'Y' or not. Or how long.
This is the way it works:
Hardware 쳐컴컴컴컴컴컴� BIOS 컴컴컴컴컴컴컴컴� 쳐컴� DOS 컴캑
旼컴컴컴컴컴컴�
渼Keyboard Data쳐컴컴�
냅컴컴컴컴컴컴籠 �
旼컴컴� 旼컴컴엿 旼컴컴컴커 � 旼컴컨컴컴컴컴� 旼컴컴컴컴컴커
쿸ey- 쳐爐큛nt 9쳅컴큝eyboard쳐컴퀯IOS keyboard쳐컴퀱OS keyboard�
쿫oard� � 읕컴컴� 쿫uffer � � 쿯unctions � 쿯unctions �
읕컴컴� � 읕컴爐컴켸 � 읕컴컴켠컴컴컴� 읕컴컴켠컴컴켸
� � � � �
훤袴袴袴袴袴袴袴姦袴袴菰箇袴袴袴姦袴袴袴袴袴袴袴袴�
�
Possible tap points
The keyboard triggers IRQ 1 (Interrupt Request), also known as int 9.
Int 9 then translates the keyboard codes into ASCII, or when necessary,
extended ASCII, and places it into the keyboard buffer. Also, the shift
and lock states are saved in the BIOS Data Area (seg 40h). The keyboard
buffer is then used by the BIOS functions to interface with programs.
The DOS functions use the BIOS keyboard functions to interface with
programs as well, but on a higher and more protected (Ctrl-Brk etc)
level.
1.1. Extended ASCII
컴컴컴컴컴컴컴컴컴�
Extended ASCII is IBM's way of letting non-ASCII keys be recognized by
programs. The BIOS will first send 0 and then the extended ASCII code.
Here is the table:
靈컴컴컴컴컴爐컴컴컴컴컴컴컴컴爐컴컴컴컴컴컴컴컴爐컴컴컴컴컴컴컴캠
튚ey Hex Dec튚ey Hex Dec튚ey Hex Dec튚ey Hex Dec�
픔컴컴컴컴컴崙컴컴컴컴컴컴컴컴崙컴컴컴컴컴컴컴컴崙컴컴컴컴컴컴컴캘
튔1 3B 59튥hift-F1 54 84튏trl-F1 5E 94튍lt-F1 68 104�
튔2 3C 60튥hift-F2 55 85튏trl-F2 5F 95튍lt-F2 69 105�
튔3 3D 61튥hift-F3 56 86튏trl-F3 60 96튍lt-F3 6A 106�
튔4 3E 62튥hift-F4 57 87튏trl-F4 61 97튍lt-F4 6B 107�
튔5 3F 63튥hift-F5 58 88튏trl-F5 62 98튍lt-F5 6C 108�
튔6 40 64튥hift-F6 59 89튏trl-F6 63 99튍lt-F6 6D 109�
튔7 41 65튥hift-F7 5A 90튏trl-F7 64 100튍lt-F7 6E 110�
튔8 42 66튥hift-F8 5B 91튏trl-F8 65 101튍lt-F8 6F 111�
튔9 43 67튥hift-F9 5C 92튏trl-F9 66 102튍lt-F9 70 112�
튔10 44 68튥hift-F10 5D 93튏trl-F10 67 103튍lt-F10 71 113�
聃컴컴컴컴컴懃컴컴컴컴컴컴컴컴懃컴컴컴컴컴컴컴컴懃컴컴컴컴컴컴컴캭
靈컴컴컴컴컴컴爐컴컴컴컴컴컴켠컴컴컴컴컴컴컴컴켠컴컴컴컴컴컴컴컴캠
튚ey Hex Dec튚ey Hex Dec튚ey Hex Dec튚ey Hex Dec�
픔컴컴컴컴컴컴崙컴컴컴컴컴컴켰컴컴컴컴컴컴컴컴켰컴컴컴컴컴컴컴컴캘
튍lt-A 1E 30튍lt-P 19 25튍lt-3 7A 122튲own 50 80�
튍lt-B 30 48튍lt-Q 10 16튍lt-4 7B 123튽eft 4B 75�
튍lt-C 2E 46튍lt-R 13 19튍lt-5 7C 124틆ight 4D 77�
튍lt-D 20 32튍lt-S 1F 31튍lt-6 7D 125틌p 48 72�
튍lt-E 12 18튍lt-T 14 20튍lt-7 7E 126튓nd 4F 79�
튍lt-F 21 33튍lt-U 16 22튍lt-8 7F 127튗ome 47 71�
튍lt-G 22 34튍lt-V 2F 47튍lt-9 80 128튡gDn 51 81�
튍lt-H 23 35튍lt-W 11 17튍lt-- 82 130튡gUp 49 73�
튍lt-I 17 23튍lt-X 2D 45튍lt-= 83 131� �
튍lt-J 24 36튍lt-Y 15 21� �^left 73 115�
튍lt-K 25 37튍lt-Z 2C 44튞UL 03 3�^right 74 116�
튍lt-L 26 38� 튥hift-Tab 0F 15�^End 75 117�
튍lt-M 32 50튍lt-0 81 129튘ns 52 82�^Home 77 119�
튍lt-N 31 49튍lt-1 78 120튒el 53 83�^PgDn 76 118�
튍lt-O 18 24튍lt-2 79 121�^PrtSc 72 114�^PgUp 84 132�
聃컴컴컴컴컴컴懃컴컴컴컴컴컴켕컴컴컴컴컴컴컴컴켕컴컴컴컴컴컴컴컴캭
�袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴敲
� 101-key Keyboard Extensions Supported by BIOS �
靈컴컴켕컴컴컴컴컴爐컴컴컴컴컴컴컴컴컴컴爐컴컴컴컴컴컴켕컴컴컴캠
튚ey Hex Dec튚ey Hex Dec튚ey Hex Dec�
픔컴컴컴컴컴컴컴컴崙컴컴컴컴컴컴컴컴컴컴崙컴컴컴컴컴컴컴컴컴컴캘
튔11 85 133튍lt-Bksp 0E 14튍lt - K / A4 164�
튔12 86 134튍lt-Enter 1C 28튍lt - K * 37 55�
튥hft-F11 87 135튍lt-Esc 01 1튍lt - K - 4A 74�
튥hft-F12 88 136튍lt-Tab A5 165튍lt - K + 4E 78�
튏trl-F11 89 137튏trl-Tab 94 148튍lt - K Enter A6 166�
튏trl-F12 8A 138� � �
튍lt-F11 8B 139튍lt-up 98 152튏trl- K / 95 149�
튍lt-F12 8C 140튍lt-down A0 160튏trl- K * 96 150�
튍lt-[ 1A 26튍lt-left 9B 155튏trl- K - 8E 142�
튍lt-] 1B 27튍lt-right 9D 157튏trl- K + 90 144�
튍lt-; 27 39� � �
튍lt-' 28 40튍lt-Delete A3 163튏trl- K Up [8] 8D 141�
튍lt-` 29 41튍lt-End 9F 159튏trl- K Cn [5] 8F 143�
튍lt-\ 2B 43튍lt-Home 97 151튏trl- K Dw [2] 91 145�
튍lt-, 33 51튍lt-Insert A2 162튏trl- K Ins[0] 92 146�
튍lt-. 34 52튍lt-PageUp 99 153튏trl- K Del[.] 93 147�
튍lt-/ 35 53튍lt-PageDown A1 161� �
聃컴컴컴컴컴컴컴컴懃컴컴컴컴컴컴컴컴컴컴懃컴컴컴컴컴컴컴컴컴컴캭
K indicates a key on the numeric keypad (when not in NumLock mode)
1.2. Special Functions
컴컴컴컴컴컴컴컴컴컴컴
There are a few functions and interrupts invoked by int 9:
int 5 - Print Screen Handler
int 15h
fns 4fh - Check Scancode
(See int 9)
85h - System Request
Normally IRET
int 23h - Ctrl-Break handler
Feel free to revector any of them.
2. DOS Interfacing
컴컴컴컴컴컴컴컴컴
One of the ways to use the keyboard is to let DOS handle it.
Pro:
- The keyboard lay-out is unimportant
- You can even do strings
- The user doesn't actually have to type
Contra:
- You don't know if you are actually accessing the keyboard (like
in "Really format drive C: ? Y/N" :-)
- The functions are quite slow
2.1. Functions
컴컴컴컴컴컴컴
DOS provides a set of 7 functions to handle the keyboard:
01h Keyboard Input
06h Console I/O
07h No Echo Unfiltered Input
08h No Echo Filtered Input
0Ah Buffered Input
0Bh Input Status
0Ch Clear Keyboard Buffer & Input
They all expect the keyboard to be file handle 0. If you want to let a
program think you are typing something, you can replace this handle
with a file containing the keystrokes it must read. This is what
happens when you 'pipe' something in DOS. (Don't forget to change the
handle back to the old one!)
This also means you can use:
3Fh Read bytes from handle
Fn 01h: Keyboard Input
----------------------
Expects: AH 01h
Returns: AL Character fetched from the Standard Input
Description: Reads (waits for) a character from the Standard Input
Device. Echoes that character to the Standard Output
Device. If Ctrl-Break is detected, INT 23h is executed.
Notes: Extended ASCII keystrokes (ie, F1-F12, PgUp, cursor, etc)
will require two calls to this function. The first call
will return AL=0. The second will return AL with the
extended ASCII code.
Fn 06h: Console I/O
-------------------
Expects: AH 06h
DL 0 to 0FEh Character to send to the Standard Output
0FFh Request for input from the Standard Input
Returns: ZF Clear (NZ) if character is ready \ on input requests
AL Character read, if ZF is clear / (when DL=0FFh)
Description: If DL is 0FFh, this performs a "no wait" console input,
returning the Zero Flag (ZF) set (ZR) if there is no
character ready. If a character is ready, returns ZF
cleared (NZ) with the character that was read in AL.
If DL is anything but 0FFh, DL is sent to the Standard
Output.
Notes: Does not check for Ctrl-Break. Call twice for Extended
ASCII.
Fn 07h: No Echo Unfiltered Console Input
----------------------------------------
Expects: AH 07h
Returns: AL Character fetched from the Standard Input
Description: Reads (waits for) a character from the Standard Input
Device, returning that character in AL.
Unfiltered: Does not detect Ctrl-Break, backspace, etc.
Notes: Call twice for Extended ASCII character input.
Use Fn 0Bh to check status (if you don't want to wait for
a key).
Fn 08h: No Echo Console Input
-----------------------------
Expects: AH 08h
Returns: AL Character fetched from the Standard Input
Description: Reads (waits for) a character from the Standard Input
Device, returning that character in AL.
If Ctrl-Break is detected, INT 23h is executed.
Notes: Call twice for Extended ASCII character input.
Fn 0Ah: Buffered String Input
-----------------------------
Expects: AH 0Ah
DS:DX Address of an input buffer (see below)
Returns: Buffer contains input terminated with CR (ASCII 13h)
Description: On entry, the buffer at DS:DX must be set up as:
旼컴쩡컴쩡컴쩡컴쩡컴쩡컴쩡 � �
쿺ax� ? � ? ? ? ? ? max is maximum acceptable
읕컴좔컴좔컴좔컴좔컴좔컴� � � input (range: 1 to 254)
On exit, the buffer is filled:
旼컴쩡컴쩡컴쩡컴쩡컴쩡컴쩡 � � len is actual length of
쿺ax쿹en� T E X T 0Dh input, less the termina-
읕컴좔컴좔컴좔컴좔컴좔컴� � � ting CR (eg, 4).
Characters are read from the Standard Input up to a CR
(ASCII 13) or up to the value of max-1. If max-1 is
reached, the console bell rings (beeps) for each character
until Enter (CR) is read.
The second byte of the buffer is filled with the actual
length of the input, less the terminating CR. The final
character in the buffer is always CR (which is not counted
in the length byte).
The characters in the buffer (including the len) before
the call are used as a "template" and the DOS editing keys
are in effect: [Esc] displays "\" and restarts the edit,
[F3] displays to the end of the template, [F5] displays
"@" and stores the current line as the template, etc.
Most Extended ASCII keystrokes are ignored.
If Ctrl-Break is detected, INT 23h is executed and the
buffer is left unchanged.
Fn 0Bh: Check Input Status
--------------------------
Expects: AH 0Bh
Returns: AL 0FFh if a character is available from the Standard Input
0 if no character is available
Description: Checks the status of the Standard Input.
If Ctrl-Break is detected, INT 23h is executed.
Notes: Use before Fns 01h, 07h and 08h to avoid having DOS wait
for a key.
This is a simple, non-destructive way to check for
Ctrl-Break during long calculations or other processing
that does not normally look for input. It lets the user
abort from such a sequence.
Fn 0Ch: Clear & Input
---------------------
Expects: AH 0Ch
AL DOS input function number (01h, 06h, 07h, 08h, or 0Ah)
Returns: none
Description: Clears the Standard Input type-ahead buffer then invokes
the DOS input function specified by AL. This forces the
system to wait for a character to be typed.
These values are allowed for AL:
01h Keyboard Input
06h Console I/O
07h No Echo Unfiltered Input
08h No Echo Filtered Input
0Ah Buffered Input
In addition to these functions, it is also possible to read a selected
amount of characters from the keyboard, using DOS's File Handle
functions, as the Keyboard, aka Standard Input, has a pre-set handle of
0000h:
Fn 3Fh: Read from keyboard via Handle
-------------------------------------
Expects: AH 3Fh
BX 0000h - Handle for Standard Input (Keyboard)
DS:DX Address of buffer to receive data
CX Number of bytes to read
Returns: AX Error code if CF is set to CY
AX Number of bytes actually read
Description: CX bytes of data are read from the keyboard. The data is
placed into the caller's buffer pointed to by DS:DX.
Notes: It is handy to use this function for reading default
handles such as the Standard I/O handles, instead of the
buffered input or character-by-character input functions.
When you read from a device, AX returns the length of the
line up to and including the termination CR (ASCII 13h).
3. BIOS Interfacing
컴컴컴컴컴컴컴컴컴�
Pro:
- You get to know all the statusses and such
- It's a tad bit faster than DOS
- You can only read the keyboard
- It's easier than the really hardcore low level, and the keys
are translated
Contra:
- It is still to slow for games or demos
- You don't have bulk access, like strings
The BIOS has 3 different ways of reading (parts of) the keyboard:
- functions
- keyboard flags
- keyboard buffer
This part describes all of them.
3.1. Functions
컴컴컴컴컴컴컴
These functions can be accessed through int 16h.
Fn 00h: Read (wait for) next keystroke
--------------------------------------
Expects: AH 0
Returns: AL ASCII character (if AL=0, AH is an Extended ASCII key-
stroke)
AH Scan Code or Extended ASCII keystroke
Fn 01h: Check if a keystroke is ready (and preview it if so)
------------------------------------------------------------
Expects: AH 1
Returns: ZF ZR or 1 if no key is ready
ZF NZ or 0 if a key is ready.
AX is set as for Fn 00h (but the keystroke has not been
removed from the queue).
Fn 02h: Read the shift-key status
---------------------------------
Expects: AH 2
Returns: AL shift key and 'lock' status as in 83-keyboard flags
Description: Determine which shift keys are currently being pressed and
whether the keyboard is in NumLock state, etc.
Fn 03h Set keyboard typeamatic rate and delay. (11/15/85 BIOS)
--------------------------------------------------------------
Expects: AH 3
AL 05h (eg, AX = 0305h)
BL Typeamatic Rate
0: 30 keys/sec 10: 10
1: 26.7 13: 9
2: 24 16: 7.5
4: 20 20: 5
8: 15 31: 2
BH Delay: 0=250ms 1=500ms 2=750ms 3=1 second)
Returns: none
Description: when a key is pressed, the keyboard will wait during Delay
before it starts repeating at Typematic Rate.
Fn 05h Place a keystroke into the keyboard buffer. (11/15/85 BIOS)
------------------------------------------------------------------
Expects: AH 5
CL ASCII character.
CH Scan Code byte (or 0 if you don't care)
Returns: AL Status: 0=success; 1=buffer full
Fn 10h Read (wait for) a keystroke; 101-keyboard only (11/15/85 BIOS)
---------------------------------------------------------------------
Expects: AH 10h
Returns: AL ASCII character (if AL=0, AH is an Extended ASCII key-
stroke)
AH Scan Code or Extended ASCII keystroke
Fn 11h Preview keystroke; same as 01; 101-keyboard only (11/15/85 BIOS)
-----------------------------------------------------------------------
Expects: AH 11h
Returns: ZF ZR or 1 if no key is ready
ZF NZ or 0 if a key is ready.
AX set as for Fn 10 but keystroke is still in the buffer.
12h Read shift-key status; same as 02; 101-keyboard only (11/15/85 BIOS)
------------------------------------------------------------------------
Expects: AH 12H
Returns: AL shift key and 'lock' status as in 101-keyboard flags
3.2. Keyboard Flags
컴컴컴컴컴컴컴컴컴�
The keyboard flags are found in the BIOS Data Area: segment 40h.
17h: 83-keyboard flags 0=Off, 1=On
---------------------------------------
bit 0: Right shift
1: Left shift
2: Ctrl, either side
3: Alt, either side
4: Scroll Lock
5: Num Lock
6: Caps Lock
7: Insert state
Do NOT just change one of these and then hope the keyboard follows. The
LEDs will definitely get out of sync.
18h: 101-keyboard flags 0=Off, 1=On
---------------------------------------
bit 0� : Left ctrl
1쳐At keyb. only : Left Alt
2� : Sys Req
3: Pause state
4: Scroll Lock �
5: Num Lock 쳐Being pressed
6: Caps Lock �
7: Insert �
Do NOT just change one of these and then hope the keyboard follows. The
LEDs will definitely get out of sync.
19h: Pseudokey value
--------------------
This is the accumulating value of the key being made with Alt+numeric
keypad. Normally 0
71h: Ctrl-break flag 0=Off, 1=On
---------------------------------------
bit 7: Ctrl-Break was pressed. Never gets reset, unless you do.
96h: AT only - keyboard ? 0=Off, 1=On
---------------------------------------
bit 4: 101/102 keyboard is attached
97h: AT only - lock LEDs 0=Off, 1=On
---------------------------------------
bit 0: ScrollLock �
1: NumLock 쳐 keyboard LED is turned on
2: CapsLock �
Do NOT just change one of these and then hope the keyboard follows.
The LEDs will definitely get out of sync.
3.3. Keyboard Buffer
컴컴컴컴컴컴컴컴컴컴
The keyboard buffer is a circular data area. This means that when a
pointer in the buffer gets one larger than the buffer, it is wrapped
around to the beginning.
The keyboard buffer is fed by int 9 and function 5 of int 16h. It is
found at the BIOS data segment, 40h. It is pointed to by 4 variables in
the BDA: The head (1ah), the tail (1ch), the Beginning (80h) and the
End (82h). They are all words, pointing at locations in the BDA.
The latter two are only available on ATs and PSs. They are used to
enlarge the keyboard buffer by mapping it to another spot in the BIOS
data area. Normally, that spot is 32 bytes long starting from 1eh.
The head is the pointer to the next word. The tail is the pointer to
the next available word. Each code is two bytes, the scan code and the
ASCII value.
The buffer is empty if the Head = the Tail and it is full if the Tail
is two smaller than the Head, both counted circularly. This means that
the storage space equals (length buffer/2)-1.
4. Low-Level Interfacing
컴컴컴컴컴컴컴컴컴컴컴컴
Pro:
- Fast
- Complete control
Contra:
- Hard to code
- Totally NO functions at all. It's Handyman work here...
The interfacing is split in two items:
- Just changing something, such as the LED's
- Reading out codes: int 9
4.1. Interfacing And Configuring
컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴
The computer and the AT or MF II interface through I/O ports 60h and
64h, controlled by a programmable Intel 8042 (old ATs), 8741 or 8742
(newer, allow two input devices (like the PS/2 mouse)) microprocessor
or compatible, which allows typematic rate programming, LEDs lighting
and some other stuff. It also has a +-20 byte output buffer for smooth
operation and long scancodes.
The old XT keyboard has a 8048, which is in essence just a very
primitive one-way serial interface, so all used is port 61h, to disable
and reenable the keyboard on every scancode.
Port 60h: Input & output
------------------------
Read: Scancodes and keyboarddata
--------------------------------
This port gives the following output codes:
00h: Keyboard error, too many keys are being pressed at once
aah: Basic Assurance Test (BAT) end
abh 41h: The result of requesting keyboard ID on a MF II keyboard
eeh: The result of the echo command
fah: ACK(noledge). Sent by every command, except eeh and feh
fch: BAT failed
feh: Resend your data please
ffh: Keyboard error
All the rest are make (press) and break (release) codes of the keys.
Write: Command data
-------------------
This is the place where command data has to be sent. If the command
consists of two bytes, you must wait until the outputbuffer is sent to
the keyboard. Check on it via bit 1 of port 64h. When you send a
command, the outputbuffer is cleared, so pending results may not come.
During transmission of a two-byte command, the keyboard stops scanning.
When you send something out of range or so, the keyboard will react
with feh (resend). All commands, except echo (eeh) and resend (feh)
result in ACK (fah) to be sent.
Commands:
edh: Set keyboard LEDs
Send a second byte with:
bit 0 = Scroll Lock 0=Off 1=On
1 = Num Lock
2 = Caps Lock
rest = 0
Do make an effort to keep the BIOS keyboard flags in sync.
eeh: Great fun. Send it, and get 0eeh right back! :-]
(Diagnostics)
f0h: Select scancode set.
0: return current set number: 1:'C', 2:'A', 3:'?'
1: set scancode set no 1
2: set scancode set no 2 -> standard
3: set scancode set no 3
f2h: Identify keyboard
XT: nothing (that is, time-out error :-) (see port 64h)
AT: ACK
MF II: ACK abh 41h
f3h: Typematic rate programming
Send a second byte with:
bit 0 -> 4: rate. Timings:
0: 30 keys/sec 10: 10
1: 26.7 13: 9
2: 24 16: 7.5
4: 20 20: 5
8: 15 31: 2
bit 5 & 6: pause before repeat:
0: 250 ms
1: 500
2: 750
4: 1000
bit 7: Always 0
The next three are doubtfull, since one of my sources say they don't
exist and another says they do. I leave it up to you :)
f4h: Enable keyboard. It clears its buffer and starts scanning.
f5h: Reset keyboard, disable scanning
f6h: Reset keyboard, enable scanning
feh: Resend last transmission. I really don't know what it does, since
it sends something incomprehesible.
ffh: Internal diagnostics: Sends aah if successfull. Warning! The
keyboard reacts with ACK and then you have to set the data and
clock pins high, DURING AT LEAST 500 SECONDS!. Do this via the
outputport (see 64h). After that, the BAT (Basic Assurance Test)
starts. This sends aah on success and fch on failure.
Example: Set the keyboard LEDs
start:
in al, 64h \It would be good
and al, 02h ;Test if command buffer is empty |to put this in a
jnz start /macro...
mov al, edh
out 60h, al ;Write outputport
wait:
in al, 64h
and al, 02h ;Test if command came through
jnz wait
mov al, 0111b
out 60h, al ;Set all LED's to ON.
Port 61h
--------
This port is used to acknoledge the receival of a scancode, by
disabling the keyboard and immediately reenabling it. This also means
that you can read a scancode as many times as you like, until you
acknoledge the receival.
bit 0 -> 5: Nothing to do with keyboard, but with the Programmable
Peripheral Interface (PPI) -> save them!
bit 6: Hold keyboard clock low -> Keyboard can't send any data.
bit 7: 0=Enable keyboard; 1=Disable keyboard
Example:
in al, 61h
mov ah, al ;Save keyboard status
or al, 80h ;Disable
out 61h, al
mov al, ah ;Enable (If it was disabled at first, you wouldn't
out 61h, al ; be doing this anyway :-)
Port 64h: Interface: data and control
-------------------------------------
Read: Statusport
----------------
bit 0: 1: Keyboard data is in buffer
0: Output buffer empty -> use it to check for results
1: 1: User data is in buffer
0: Command buffer is empty -> time to send a command
2: 1: Selftest successful
0: Reset (?)
3: 1: 64h was last accessed port
0: 60h was last accessed port
4: 1: Keyboard enabled
0: Keyboard locked
5: PS/2: Mouse interface
6: 1: Time-out error occurred: Keyboard or PS/2 mouse didn't
react. Use the Resend command to retry fetching the data
byte. This could happen when trying to get a XT keyboard
to do something :).
7: 1: Last transmission had a parity error
Write: Control register
-----------------------
This is the control room of the keyboard interface. If additional data
is required, send it to port 60h after writing the command to 64h.
Also, check 61h bit 2 before sending anything.
Commands:
aah: Keyboard self test. Sends 55h if successfull.
abh: Test interface. Sends:
00h: No error
01h: Clock low
02h: Clock high
03h: Data low
04h: Data high
ffh: Total Error
adh: Deactivate keyboard
aeh: Activate keyboard
c0h: Read inputport. This is some highly specialized stuff and I wonder
why I am typing this. Ok. The inputport is that what the keyboard
is sending and some more. Layout:
bit 0: Keyboard data in pin
1: PS/2 mouse in pin
2->5: reserved
6: Wether you have a color or mono screen
7: 1: Keyboard not locked
0: Keyboard locked
When you issue this command, the inputport is put on the
outputbuffer, so you have the great priviledge of reading it at
port 60h.
c1h: Puts the low nibble of the input port over bits 4-7 of the
statusport, so you can read them out continuously. This lasts
until bit 2 of the statusport gets set, meaning you are sending
data to the keyboard.
c2h: Ditto, but it puts the high nibble over bits 0-3 of the
statusport. Lifespan is the same.
d0h: Puts the outputport on the buffer. Layout:
bit 0: 1: Reset processor
1: 1: A20 gate enable
2: PS/2 mouse data out
3: PS/2 mouse clock signal
4: 1: Output buffer full
5: 1: Output buffer PS/2 mouse full
6: Keyboard clock signal
7: Keyboard data out
Bit 0 and 1 are quite important for high memory and
286-extended-memory access.
d1h: Write the following data byte to the outputport
d2h: Write the following data byte to the keyboardbuffer. This is VERY
handy for TSRs that need to read codes that start with e0h. This
way, they don't have to pass through the e0h, unless they know for
sure it isn't their code, which results in correct functioning
shift keys etc. At least, if it does what I think it
does... [UNTESTED]
d3h: Ditto, for PS/2 mouse.
d4h: Write byte to PS/2 mouse.
e0h: Reads the keyboards testinputs, T0 and T1. T0 goes to bit 0 and T1
to bit 1 of the byte that is put on the outputbuffer.
fxh: I think it sends x to the low nibble of the output port. It does
reset my computer when I send feh, but that doesn't mean anything
:-). The official explanation says that it keeps the corresponding
bits in the output port low for 6ms...
Example: Send something to the outputport
start:
in al, 64h \It would be good
and al, 02h ;Test if command buffer is empty|to put this in a
jnz start /macro...
mov al, d1h
out 64h, al ;Write outputport
wait:
in al, 64h
and al, 02h ;Test if command came through
jnz wait
mov al, 01h
out 60h, al
4.2. Lay-Out
컴컴컴컴컴컴
The keyboard first consisted of 83 keys, which is now known as the XT
keyboard. Then came along the AT-keyboard, which has 84 keys, a
slightly different layout and an extra SysReq key. The next keyboard is
the MF II keyboard. This one has 101 or 102 keys, and this is the one
this section will be babbling about.
The keycaps change, but the most popular settings are QWERTY and
AZERTY. Also popular is the Dvorak lay-out, made by what's-his-name
Dvorak, who made the lay-out so that both hands did not have to move
that much, resulting in fast (up to double) typing speed. This is it,
should you be interested (slight modifications by me, because it
actually requires a 12x4 keyboard):
101 - key 102 - key
~ ! @ # $ % ^ & * ( ) [ + � ! @ # $ % ^ & * ( ) [ +
` 1 2 3 4 5 6 7 8 9 0 ] = � 1 2 3 4 5 6 7 8 9 0 ] =
" , . P Y F G C R L ? { | " , . P Y F G C R L ? {
' , . p y f g c r l / } \ ' , . p y f g c r l / }
A O E U I D H T N S _ < A O E U I D H T N S _ ~
a o e u i d h t n s - > a o e u i d h t n s - `
: Q J K X B M W V Z > : Q J K X B M W V Z
; q j k x b m w v z < ; q j k x b m w v z
The key lay-out is as follows: (The numbers are internal to the
keyboard)
US-English Keyboard: 101 keys
-----------------------------
旼커旼컫컴쩡컫컴왯컴쩡컫컴쩡커旼컫컴쩡컫컴왯컴쩡컫컴�
�10납12�13�14�15납16�17�18�19납20�21�22�23납24�25�26� <컴 Add 100 to the
읕켸읕컨컴좔컨컴牡컴좔컨컴좔켸읕컨컴좔컨컴牡컴좔컨컴� keycodes on
this line
旼쩡컫컴쩡컫컴쩡컫컴쩡컫컴쩡컫컴쩡컫컴쩡컴왯컴쩡컫컴왯컴쩡컫컴컫컴커
�1� 2� 3� 4� 5� 6� 7� 8� 9�10�11�12�13� 15납75�80�85납90�95�100�105�
쳐좌컨쩡좌컨쩡좌컨쩡좌컨쩡좌컨쩡좌컨쩡좌컴늘컴탠컵컴늘컴탠컵컴컵컴캑
�16�17�18�19�20�21�22�23�24�25�26�27�28�29납76�81�86납91�96�101� �
쳐컨쩡좌컨쩡좌컨쩡좌컨쩡좌컨쩡좌컨쩡좌컨컴느컴좔컨컴矛컴탠컵컴캑 �
�30 �31�32�33�34�35�36�37�38�39�40�41� 43 � �92�97�102�106�
쳐컴좔쩝컫좔쩝컫좔쩝컫좔쩝컫좔쩝컫좔쩝컴컴� 旼커 쳐컵컴탠컴탠컴�
� 44 �46�47�48�49�50�51�52�53�54�55� 57 � �83� �93�98�103� �
쳐컴쩡탠컨쩡좔컨컴좔컨컴좔컨컴좔쩝컴탠쩡컴닥컴탠컵컴올컴좔컵컴캑 �
�58 � �60 � 61 � 62� � 64납79�84�89납 99 �104�108�
읕컴� 읕컴좔컴컴컴컴컴컴컴컴컴컴좔컴� 읕컴牡컴좔컨컴牡컴컴컨컴컨컴켸
|
This has the extra 29 key, or \
Other Countries: 102 keys
-------------------------
旼커旼컫컴쩡컫컴왯컴쩡컫컴쩡커旼컫컴쩡컫컴왯컴쩡컫컴�
�10납12�13�14�15납16�17�18�19납20�21�22�23납24�25�26� <컴 Add 100 to the
읕켸읕컨컴좔컨컴牡컴좔컨컴좔켸읕컨컴좔컨컴牡컴좔컨컴� keycodes on
this line
旼쩡컫컴쩡컫컴쩡컫컴쩡컫컴쩡컫컴쩡컫컴쩡컴왯컴쩡컫컴왯컴쩡컫컴컫컴커
�1� 2� 3� 4� 5� 6� 7� 8� 9�10�11�12�13� 15납75�80�85납90�95�100�105�
쳐좌컨쩡좌컨쩡좌컨쩡좌컨쩡좌컨쩡좌컨쩡좌컴늘컴탠컵컴늘컴탠컵컴컵컴캑
�16�17�18�19�20�21�22�23�24�25�26�27�28�43납76�81�86납91�96�101� �
쳐컨쩡좌컨쩡좌컨쩡좌컨쩡좌컨쩡좌컨쩡좌컨� 냅컴좔컨컴矛컴탠컵컴캑 �
�30 �31�32�33�34�35�36�37�38�39�40�41�42� � �92�97�102�106�
쳐컫좔쩝컫좔쩝컫좔쩝컫좔쩝컫좔쩝컫좔쩝컴좔� 旼커 쳐컵컴탠컴탠컴�
�44�45�46�47�48�49�50�51�52�53�54�55� 57 � �83� �93�98�103� �
쳐컨쩡탠컨쩡좔컨컴좔컨컴좔컨컴좔쩝컴탠쩡컴닥컴탠컵컴올컴좔컵컴캑 �
�58 � �60 � 61 � 62� � 64납79�84�89납 99 �104�108�
읕컴� 읕컴좔컴컴컴컴컴컴컴컴컴컴좔컴� 읕컴牡컴좔컨컴牡컴컴컨컴컨컴켸
This has the extra 42 and 45 keys. Their characters change from
country to country.
4.3. Scancodes
컴컴컴컴컴컴컴
The AT-keyboard has 3 separate scancode settings: One as we know it,
(83 key-mapping, and added codes have an extra e0h added), one (almost)
sequential and one with ONE byte codes! Problem with the latter is that
only for lshift, caps, lctrl and lalt breakcodes are sent :-(. The
keyboard starts up in set 2, the set can be changed via port 64h (see
above).
In set 1 and 2, there are special codes, namely e0h and e1h. They are
used for keys that have the same function. An example: 1dh for the
left control key and e0h 1dh for the right one. This is done for
lowlevel compatibility with XT programs. Notice that the only time e1h
is used, is when it represents a temporary control key, which also has
a e0h version.
e0h 2ah is a temporary shift function, used by for example PrtScr,
which is in reality shift-numkeypad-*, like on the XT keyboard. See
below for further information.
The code will be sent as shown further. The codes listed are the make
codes. They are sent when a key is pressed. Upon release, the keyboard
sends a break code. It is the make code, but ORed with 80h. The only
exception to this are the codes e0h and e1h, which remain the same. So
for example pressing and releasing the right ctrl key would give e0h
1dh and e0h 9dh. I only give the codes for set 2 because the rest would
be too much work and stupid. If you want them, look them up yourself.
Modify any of the accompanying source codes or so...
� Only on US-English keyboards
瓢 Only on other country versions
Scancodes are in hex.
Key Scan Key Scan Key Scan Key Scan Key Scan Key Scan
no. code no. code no. code no. code no. code no. code
컴컴쩡컴컴爐컴컫컴컴켠컴컴쩡컴컴爐컴컫컴컴켠컴컴쩡컴컴爐컴컫컴컴�
1 �29 �19 �12 �36 �23 �53 �33 �86 쿮0 51�106 �4e
2 �02 �20 �13 �37 �24 �54 �34 �89 쿮0 4d�108 쿮0 1c
3 �03 �21 �14 �38 �25 �55 �35 �90 �45 �110 �01
4 �04 �22 �15 �39 �26 �57 �36 �91 �47 �112 �3b
5 �05 �23 �16 �40 �27 �58 �1d �92 �4b �113 �3c
6 �06 �24 �17 �41 �28 �60 �38 �93 �4f �114 �3d
7 �07 �25 �18 �42瓢�2b �61 �39 �95 쿮0 35�115 �3e
8 �08 �26 �19 �43 �1c �62 쿮0 38�96 �48 �116 �3f
9 �09 �27 �1a �44 �2a �64 쿮0 1d�97 �4c �117 �40
10 �0a �28 �1b �45瓢�56 �75 쿮0 52�98 �50 �118 �41
11 �0b �29� �2b �46 �2c �76 쿮0 53�99 �52 �119 �42
12 �0c �30 �3a �47 �2d �79 쿮0 4b�100 �37 �120 �43
13 �0d �31 �1e �48 �2e �80 쿮0 47�101 �49 �121 �44
15 �0e �32 �1f �49 �2f �81 쿮0 4f�102 �4d �122 �57
16 �0f �33 �20 �50 �30 �83 쿮0 48�103 �51 �123 �58
17 �10 �34 �21 �51 �31 �84 쿮0 50�104 �53 �124 �(*)
18 �11 �35 �22 �52 �32 �85 쿮0 49�105 �4a �125 �46
�126 �(*)
(*)
Key 124, AKA PrtScr/SysRq, is both. When pressed normally, it will send
(hex) e0 2a e0 37. This is in fact a special shift-*, or the original
place of that code on the XT keyboard.
Used in conjuction with:
Normal: e0 2a e0 37
Shift : e0 37
Ctrl : e0 37
Alt : e0 54
Key 126: Pause/Break. On the XT keyboard, this used to be ctrl-NumLock
and ctrl-ScrollLock. Now guess the codes... Very special is that the
break codes are sent immediately after the make codes. I think that is
because the codes have odd length.
Normal: e1 1d 45 (e0 1d is already used by rightctrl)
Ctrl : e0 46 (46 is the code for ScrollLock...)
4.4. Int 9
컴컴컴컴컴
When a key is pressed or released, or when the 8042 sends an ACK or NAK
the keyboard triggers IRQ1, or int 9. This can be masked by setting
bit 1 on port 21h, the interrupt controller. Int 9 gets the scancode,
translates it and puts it in the keyboard buffer.
BEWARE: When a scancode consists of more than 1 byte, it should be read
------ one byte per call. (Took me quite long to find out...)
Translating:
-----------
Int 9 will first call int 15h, subfunction 4fh, with the scancode in
al. If the scancode is legitimate, the carry flag is set, and al
contains the scancode. If not, the carry flag is reset, and int 9
stops. (The carries are picked so that if int 9 thinks the BIOS
supports the call and it doesn't, the carry is set by the BIOS, and the
scancode can always be used). This allows the keyboard to be redefined,
by taking over the function and replacing scancodes.
If you want to take over int 9, you must remember to let the interrupt
controller know when you are finished, by writing 20h to port 20h,
since this is a hardware interrupt. You should also disable and then
reenable the keyboard (see port 61h), so the keyboard knows you got the
code. The codes come in one byte per IRQ, so save e0hs.
The key will be translated by int 9, with the following special cases:
00h:
User is pressing too many keys at once: beep or something
aah, bah 41h, eeh, fah, feh:
Ignore it. Someone is playing with port 60h
fch, ffh:
Ditto, but now you know the keyboard is screwed up :)
e0h 2ah:
Well. If you let the keyboard decide what the NumLock state is
(nothing to do with the LED), use it to see how the code must be
translated (e0h 2ah: NumLock is on). Else, ignore. (Most Smart)
Ctrl-NumLock or Pause:
Place system in a tight wait loop until next key pressed. It would
be friendly to allow hardware IRQ's... (clock, comms etc) (I think)
Ctrl-Break:
Clear keyboard buffer (=Equal Head and Tail), place word 0000h in
buffer, invoke int 23h, and set flag at 0040h:0071h (bit 7=1).
Shift-PrtScr:
Invoke int 5
Ctrl-PrtScr:
redirect CON to PRN. (Teletype mode)
Never used it, perhaps never will. Doesn't work on my keyboard
driver... (DOS) Don't know how to stop it. Perhaps rehitting
Ctrl-PrtScr... This is from hearsay.
SysRq:
Invoke int 15 subfunction 85h. al->0 when pressed, 1 when released.
Ctrl-Alt-Del:
Reboot. Here's a sample of how to reboot:
mov ah,0Dh ; Disk Reset
int 21h ; causes SmartDrv 4.x to write cache
mov ax, 40h ; set up segment addressing
mov ds,ax
or byte ptr ds:[17h],0Ch ; equivalent of pressing CTRL+ALT
mov ax,4F53h ; Issue a "DEL" (53h = DEL scan code)
int 15h ; EMM386 sees this & shuts down
mov word ptr ds:[72h],1234h ; Set REBOOT flag to Warm-Boot (0=cold)
db 0EAh,0h,0h,0FFh,0FFh ; JMP FFFF:0000
Of course, the int 15h call should already have been done by the
handler. It is also used by other caches to flush.
Shift-numkeypad:
Temporarily reverse the NumLock state, e.g. 8 becomes arrow up and
vice versa.
Alt+numkeypad:
Make the pseudokey in BDA byte 19h until the alt is released, then
put it in the keyboard buffer. How? Well, everytime an extra number
comes in, multiply BDA:19h with 10 and add the new number.
Alt release:
See above. Just making sure it is implemented ;-)
Ctrl+a->z:
Send bytes 1 through 27
Foreign keyboards:
Some keys are accents, to be placed on the next key.
Right alt:
Some keys have three keys on it. To access them, the right alt is
pressed. So remember to send the right ASCII code...
NumLock:
Switch numkeypad on/off and light/switch off LED
CapsLock:
Translate normal letters to caps or vice versa and light/switch off
LED. A nice touch would be to have a distinction between CapsLock
and Ctrl-CapsLock. The former would shift alfabetic
keys only and the latter all keys...
ScrollLock:
Light/sw. off LED
Int 9 also has to adjust the BDA flags and keyboard buffer. In
addition, the driver should warn when the keyboard buffer is full.
5. Tech Stuff
컴컴컴컴컴컴�
Interface:
Bidirectional, serial synchronous. The keyboard communicates via
clock and data line with the system. The data comes in 11 bit
packets, namely start-data-parity-stop. Parity is uneven.
=1 8bit 1bit =0
Also, see further.
Data Format:
Data transfer to and from the keyboard in IBM-compatible format:
AT-, PS/2-mode: Idle state - "Data & Clock" high.
PC mode: Idle state - "Data" low, "Clock" high.
Data Output:
Open drain.
Keyboard Sequence:
Alpha-N-key-rollover.
Automatic repeat function:
All keys have auto repeat. Delay and repeat sequence can be
modified through the system, but is fixed for PC-mode. (10Hz after
500ms)
Keyboard Self-diagnostic test:
After "Power-On" or upon request, the keyboard carries out a
self-diagnostic test. After positive test, the keyboard sends AAh.
Any other is a failure.
Pin assignment:
___ 1 Clock
/524\ 2 Data
|3 1|커 3 Not used
\_�_/ 쿬hassis gnd 4 Gnd
- 5 +5V (This is the place to tap from :-)
PS/2 adaptor: 1 Data
_ _ 2 Not used
/5U6\ 3 Gnd
|3 4|커 4 +5V
\1_2/ 쿬hassis gnd 5 Clock
- 6 Not used
The PC-XT keyboard communication protocol
-----------------------------------------
Below is a drawing of the timing of the data, send to the PC. The upper
line shows the clock line, the lower the data line. The text above
indicates the position of the start, data and stop bits (clocked on the
negative edge of the clock line).
Start 1 2 3 4 5 6 7 8 Stop
� � � � � � � � � �
컴커 旼커 旼커 旼커 旼커 旼커 旼커 旼커 旼커 旼커 旼컴
clk읕켸 읕켸 읕켸 읕켸 읕켸 읕켸 읕켸 읕켸 읕켸 읕켸
컴컴컴컴쩡컴컴쩡컴컴쩡컴컴쩡컴컴쩡컴컴쩡컴컴쩡컴컴쩡컴커 旼
dta 읕컴컴좔컴컴좔컴컴좔컴컴좔컴컴좔컴컴좔컴컴좔컴컨컴컴컴�
The communication abides to the following rules:
- On power up or reset, the PC pulls the clock line (normally high)
low for at least 20 ms. When it is released (goes high again),
the keyboard should send the code 0AAh to the PC to indicate its
existance.
- The data is clocked in on the negative edge of the clock signal.
The clock line must normally be high, the data line can be
anything between transmissions. The clock line is delayed two PC
clock cycles in the PC, so data changes and the negative clock
edge may take place at the same time. It is safer, however, to
build in a bigger delay.
- A transmission starts with a start bit (high). Then follow eight
data bits, of witch bit 7 (MSB) indicates the release of the key.
After that normally follows a stop bit (low), but that may be
left out. In fact, due to the shift register hardware inside the
PC, any number of stop bits could be send, as long as they are
low. Not 100% hardware compatibles, however, may get confused
then.
- After a transmission, the PC pulls the data line low until it is
ready processing the data. The keyboard should wait with sending
any more data until the PC releases the data line again.
A. Acknowledgments
컴컴컴컴컴컴컴컴컴
This text was made by Wout Mertens, with the help of Tech Help of
Flambeaux software, the tech spex of Cherry and some texts I found.
Information on the PC-XT keyboard communication protocol and the
kbfunc.c file by Gertjan Klein (Floating somewhere in cyberspace).
Cherry is the registered trademark of Cherry Microschalter Gmbh etc.
IBM is the registered trademark of the IBM corporation
Mertens is the registered trademark of the Mertens Family ;-)
Improved copyright notice, thanks & greetings to:
Emil Gilliam (Floating in cyberspace as well)
Kip Cooley at the Diamond Bar BBS (909) 923-1031 (1:218/101).
Ian Remmler at the DownTown BBS (210) 625-4479 (1:387/1001).
B. How To Contact Me
컴컴컴컴컴컴컴컴컴컴
Please let me know if something is inaccurate or missing etc. Also, I
would like some feedback on the quality and usability of this text.
(Keeps me writing...) If you think this text is very usefull, you can
always send me a nice postcard from where you live to thank me... I will
then try to notify you when a new version arrives.
I am usually reachable through the Fido 80XXX echo, but you can also
reach me at the following addresses:
Fido 2:292/805.1
SBC 14:1900/457
DGI 68:320/1.3
CDN 94:810/1104
CIN 112:913/101.4
SnailMail: Wout Mertens
Jozef de Bomstr 62
2018 Antwerp
Belgium - Europe
C. The Answer To Life, The Universe And All The Rest
컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴
42.
PS: Could anyone tell me the Question?
(With thanks to Douglas Adams :-)
D. History
컴컴컴컴컴
20 feb 94: release of v1.0
5 apr 94: changed info on rebooting in int 9
added info about XT protocol, by Gertjan Klein
added C program to interface with keyboard, by Gertjan Klein
removed a bug in the copyright: Emil Gilliam was not to be
held liable :-):-):-)
removed some general typing errors
9 apr 94: removed bug in keyboard buffer info: Head and Tail do not
point to a location relative to Beginning, but instead
directly to the keyboardbuffer
23 may 94: v1.1