💾 Archived View for gemini.spam.works › mirrors › textfiles › hacking › memory.lst captured on 2023-01-29 at 07:51:29.
⬅️ Previous capture (2021-12-04)
-=-=-=-=-=-=-
[This file was originally provided by Robin Walker. --Ralf] Last Update: 7/31/94 Format of BIOS Data Segment at segment 40h: {items in curly braces not documented by IBM} Offset Size Description 00h WORD Base I/O address of 1st serial I/O port, zero if none 02h WORD Base I/O address of 2nd serial I/O port, zero if none 04h WORD Base I/O address of 3rd serial I/O port, zero if none 06h WORD Base I/O address of 4th serial I/O port, zero if none Note: Above fields filled in turn by POST as it finds serial ports. POST never leaves gaps. DOS and BIOS serial device numbers may be redefined by re-assigning these fields. 08h WORD Base I/O address of 1st parallel I/O port, zero if none 0Ah WORD Base I/O address of 2nd parallel I/O port, zero if none 0Ch WORD Base I/O address of 3rd parallel I/O port, zero if none 0Eh WORD [non-PS] Base I/O address of 4th parallel port, zero if none [PS] {Segment of Extended BIOS Data Segment} Note: Above fields filled in turn by POST as it finds parallel ports. POST never leaves gaps. DOS and BIOS parallel device numbers may de redefined by re-assigning these fields. 10h WORD Installed hardware: bits 15-14: number of parallel devices bit 13: [Conv, PS/2-55LS] Internal modem bit 12: reserved bits 11- 9: number of serial devices bit 8: reserved bits 7- 6: number of diskette drives minus one bits 5- 4: Initial video mode: 00b = EGA,VGA,PGA 01b = 40 x 25 color 10b = 80 x 25 color 11b = 80 x 25 mono bit 3: reserved bit 2: [PS] =1 if pointing device [non-PS] reserved bit 1: =1 if math co-processor bit 0: =1 if diskette available for boot 12h BYTE [Conv] POST status [AT] {Manufacturing test initialisation flags} bit 0: Manufacturing test mode rather than normal operation bits 1-7 unused [MCA] Manufacturing test bit 7: POST flag, ??? bits 6-5 unused bit 4: POST flag, slot 4 has adapter identifier EDAFh bit 3: POST flag, 80x25 color video bit 2: POST flag, ??? bit 1: unused bit 0: manufacturing test mode rather than normal operation [PS/2-25] POST system flag bit 0: optional memory failed; memory remapped bit 1: real-time clock installed 13h WORD Base memory size in KBytes (0-640) 15h WORD [PC,XT] adapater memory size in KBytes 15h BYTE [AT] {Manufacturing test scratch pad} [Compaq Deskpro 386] previous scan code 16h BYTE [AT] {Manufacturing test scratch pad} [PS/2 Mod 30] {BIOS control flags} [Compaq Deskpro 386] keyclick loudness (00h-7Fh) 17h BYTE Keyboard status flags 1: bit 7 =1 INSert active bit 6 =1 Caps Lock active bit 5 =1 Num Lock active bit 4 =1 Scroll Lock active bit 3 =1 either Alt pressed bit 2 =1 either Ctrl pressed bit 1 =1 Left Shift pressed bit 0 =1 Right Shift pressed 18h BYTE Keyboard status flags 2: bit 7 =1 INSert pressed bit 6 =1 Caps Lock pressed bit 5 =1 Num Lock pressed bit 4 =1 Scroll Lock pressed bit 3 =1 Pause state active bit 2 =1 Sys Req pressed bit 1 =1 Left Alt pressed bit 0 =1 Left Ctrl pressed 19h BYTE Keyboard: Alt-nnn keypad workspace 1Ah WORD Keyboard: pointer to next character in keyboard buffer 1Ch WORD Keyboard: pointer to first free slot in keyboard buffer 1Eh 16 WORDs Keyboard circular buffer (but see 80h, 82h for override) 3Eh BYTE Diskette recalibrate status: bit 7 =1 Diskette hardware interrupt occurred bits 6-4 reserved bit 3 =1 Recalibrate diskette 3 (PC,XT only) bit 2 =1 Recalibrate diskette 2 (PC,XT only) bit 1 =1 Recalibrate diskette 1 bit 0 =1 Recalibrate diskette 0 3Fh BYTE Diskette motor status: bit 7 =1 current operation is write or format =0 current operation is read or verify bit 6 reserved (DMA enabled on 82077) bits 5-4 diskette drive number selected (0-3) bit 3 =1 diskette 3 motor on (PC,XT only) bit 2 =1 diskette 2 motor on (PC,XT only) bit 1 =1 diskette 1 motor on bit 0 =1 diskette 0 motor on 40h BYTE Diskette motor turn-off time-out count 41h BYTE Diskette last operation status (0 = OK) bit 7 =1 drive not ready bit 6 =1 seek error bit 5 =1 general controller failure bits 4-0: 00h no error 01h invalid request/parameter 02h address mark not found 03h write-protect error 04h sector not found 06h diskette change line active 08h DMA overrun 09h DMA across 64k boundary 0Ch media type unknown 10h CRC error on read Note: the following values for this byte differ somewhat from the bitfield definition above: 30h drive does not support media sense 31h no media in drive 32h drive does not support media type AAh diskette drive not ready 42h 7 BYTEs Diskette/Fixed disk status/command bytes 42h BYTE XT: command byte to hard disk controller AT: write precompensation cylinder number / 4 43h BYTE XT: bit 5 = drive number, bits 3-0=head number AT: sector count 44h BYTE XT: bits 6,7 = high bits of track, bits 5-0 = start sector-1 AT: starting sector 45h BYTE low byte of track number 46h BYTE XT: sector count AT: high bits of track number 47h BYTE XT: controlbyte from HD parameters (step rate,...) AT: 101DHHHH, D=drive number, HHHH=head number 48h BYTE XT: INT 13h subfunction number AT: comand byte to hard disk controller 42h BYTE disk controller status register 0 bits 7-6: interrupt code 00 normal completion 01 abnormal termination during execution 10 invalid command 11 abnormal termination: ready line on/diskette change bit 5: requested seek complete bit 4: drive fault bit 3: drive not ready bit 2: head state at time of interrupt bits 1-0: selected drive (drives 2&3 on PC,XT only) 43h BYTE diskette controller status register 1 bit 7: attempted access beyon last cylinder bit 6: unused bit 5: CRC error on read bit 4: DMA overrun bit 3: unused bit 2: data error bit 1: disk write protected bit 0: missing address mark 44h BYTE diskette controller status register 2 bit 7: unused bit 6: found deleted data address mark bit 5: CRC error in data field bit 4: wrong cylinder number read bit 3: verify equal bit 2: can't find sector matching verify condition bit 1: bad cylinder bit 0: unable to find address mark 49h BYTE Video current mode 4Ah WORD Video columns on screen 4Ch WORD Video page (regen buffer) size in bytes 4Eh WORD Video current page start address in regen buffer 50h 16 BYTEs Video cursor position (col, row) for eight pages, 0 based 60h WORD Video cursor type, 6845 compatible, hi=startline, lo=endline 62h BYTE Video current page number 63h WORD Video CRT controller base address: color=03D4h, mono=03B4h 65h BYTE Video current setting of mode select register 03D8h/03B8h bits 7-6 unused bit 5: attribute bit 7 controls blinking instead of background bit 4: mode 6 graphics in monochrome bit 3: video signal enabled bit 2: monochrome bit 1: graphics bit 0: 80x25 text 66h BYTE Video current setting of CGA palette register 03D9h bits 7-6 unused bit 5: palette (0/1) bit 4: intense background colors in text mode bit 3: intense border color (40x25) / background color (mode 5) bit 2: red bit 1: green bit 0: blue 67h WORD [PC only] cassette time count 67h DWORD {POST real mode re-entry point after certain resets} [PS except Mod 25,30] pointer to reset code upon system reset with memory preserved (see offset 72h) 69h WORD [PC only] cassette CRC register 6Bh BYTE [PC only] last value read from cassette [XT+] POST last unexpected interrupt bit 0 = IRQ0 to bit 7 = IRQ7 6Ch DWORD Timer ticks since midnight 70h BYTE Timer overflow, non-zero if has counted past midnight 71h BYTE Ctrl-Break flag: bit 7=1 72h WORD POST reset flag: 1234h to bypass memory test (warm boot) 4321h [PS/2 except Mod 25,30] to preserve memory 5678h [Conv] system suspended 9ABCh [Conv] manufacturing test mode ABCDh [Conv] POST loop mode 0064h Burn-in mode 74h BYTE Fixed disk last operation status, except ESDI drives: 00h no error 01h invalid function request 02h address mark not found 03h write protect error 04h sector not found 05h reset failed 06h diskette removed 07h drive parameter activity failed 08h DMA overrun 09h DMA data boundary error 0Ah bad sector flag detected 0Bh bad track detected 0Ch requested diskette media type not found (PS/2 or extended BIOS only) unsupported track 0Dh invalid number of sectors for Format 0Eh control data address mark detected 0Fh DMA arbitration level out of range 10h uncorrectable ECC or CRC error 11h ECC corrected data error 20h general controller failed 40h seek failed 80h time out AAh drive not ready BBh undefined error CCh write fault on selected drive E0h status error/error register is zero FFh sense failed 74h BYTE [WD1002-27X SuperBIOS] total drives, first controller only 75h BYTE Fixed disk: number of fixed disk drives [WD1002-27X SuperBIOS] total fixed drives, both controllers 76h BYTE Fixed disk: control byte {IBM document only for XT} XT: hard disk controller's I/O address (Western Digital) [WD1002-27X SuperBIOS] used in track recalculation 77h BYTE Fixed disk: I/O port offset {IBM document only for XT} [WD1002-27X SuperBIOS] used in track recalculation 78h 3 BYTEs Parallel devices 1-3 time-out counters 7Bh BYTE parallel device 4 time-out counter [non-PS and PS Mod 25,30] bit 7-6 reserved bit 5 set if Virtual DMA Spec supported [PS] (see INT 4B) bit 4 reserved bit 3 set if INT 4Bh intercepted and must be chained bit 2 reserved bit 1 set if Generic SCSI CBIOS services available on INT 4Bh bit 0 reserved 7Ch 4 BYTEs Serial devices 1-4 time-out counters 80h WORD Keyboard buffer start as offset from segment 40h (normally 1Eh) 82h WORD Keyboard buffer end+1 as offset from segment 40h (normally 3Eh) [XT BIOS dated 11/08/82 ends here] 84h BYTE Video EGA/MCGA/VGA rows on screen minus one 85h WORD Video EGA/MCGA/VGA character height in scan-lines 87h BYTE Video EGA/VGA control: [MCGA: =00h] bit 7: =1 if not to clear RAM (see INT 10h, AH=00h) bits 6-5: RAM on adapter = (this field + 1) * 64K bit 4: reserved bit 3: =0 if EGA/VGA video system active, =1 if inactive bit 2: =1 if to wait for display enable (what means this?) bit 1: =0 for color or ECD monitor, =1 for mono monitor bit 0: =0 alphanumeric cursor emulation enabled, =1 not. When enabled, text mode cursor size (INT 10,AH=01h) settings looking like CGA ones are translated to equivalent EGA/VGA ones. 88h BYTE Video EGA/VGA switches: [MCGA: reserved] bits 7-4: power-on state of feature connector bits 3-0 bits 3-0: configuration switches 4-1 (=0 on, =1 off) Values as read: 0h Pri MDA, Sec EGA+old color display 40 x 25 1h Pri MDA, Sec EGA+old color display 80 x 25 2h Pri MDA, Sec EGA+ECD normal mode (CGA emul) 3h Pri MDA, Sec EGA+ECD enhanced mode 4h Pri CGA 40 x 25, Sec EGA mono display 5h Pri CGA 80 x 25, Sec EGA mono display 6h Pri EGA+old color display 40 x 25, Sec MDA 7h Pri EGA+old color display 80 x 25, Sec MDA 8h Pri EGA+ECD normal mode (CGA emul), Sec MDA 9h Pri EGA+ECD enhanced mode, Sec MDA Ah Pri EGA mono display, Sec CGA 40 x 25 Bh Pri EGA mono display, Sec CGA 80 x 25 When bit4 of 40h:89h is 0, VGA emulates 350-line EGA if this byte is x3h or x9h, otherwise emulates 200-line CGA in 400-line double scan. VGA resets this byte to x9h after the mode set. See also note for next byte. 89h BYTE {Video MCGA/VGA mode-set option control:} bits 7 and 4: 0 0 350-line mode requested 0 1 400-line mode at next mode set 1 0 200-line mode requested 1 1 reserved Apparently VGA BIOS mode set disregards bit 7 and uses byte 40h:88h to determine 200/350 selection when bit 4 is zero. Presumably bit 7 is a convenience for other purposes. Bit 7 is reset to zero after the mode set. bit 6: =1 if display switching enabled, =0 if disabled bit 5: reserved bit 4: [VGA] =1 if to use 400-line mode at next mode set =0 if to emulate EGA at next mode set This bit set to 1 after the mode set. [MCGA] =1 use 400-line mode at next mode set =0 emulate CGA, digital monitor, 200 lines, 8 x 8 text font at next mode set Bit unchanged by mode set. bit 3: =0 if default palette loading enabled at mode set bit 2: =1 if mono display, =0 if color display bit 1: =1 if gray scale summing enabled, =0 if disabled bit 0: [VGA] =1 if VGA active, =0 if not [MCGA] reserved, zero Note: the Tseng ET4000 BIOS v3.00 uses bits 6-4 of 88h and bits 6-5 of 89h to specify graphics-mode refresh rates as follows 88h/6 640x480: 1 for 72Hz,0 for 60Hz 88h/5+89h/6 800x600: 00 60Hz 01 56Hz 11 72Hz 88h/4+89h/5 1024x768: 00 interlaced 01 60Hz 10 72Hz??? 11 70Hz 8Ah BYTE {Video [MCGA/VGA]: index into Display Combination Code table} 8Bh 11 BYTEs reserved [PC, PCjr, PC/XT 11/8/82, and Convertible] 8Bh BYTE Diskette media control [not XT]: bits 7-6: Last data rate set by controller: 00=500kbps, 01=300kbps, 10=250kbps, 11=1Mbps bits 5-4: Last diskette drive step rate selected 00=0Ch, 01=0Dh, 10=0Eh, 11=0Ah bits 3-2: {Data rate at start of operation} bits 1-0: reserved Note: EHD BIOS sets this byte to 01h and never reads it back 8Ch BYTE Fixed disk controller status [not XT] 8Dh BYTE Fixed disk controller Error Status [not XT] 8Eh BYTE Fixed disk Interrupt Control [not XT] cleared to 00h at start of disk operation, set to FFh by IRQ14 handler when hard disk controller completes command 8Fh BYTE {Diskette controller information [not XT]:} bit 7: reserved bit 6: =1 drive 1 determined bit 5: =1 drive 1 is multi-rate, valid if drive determined bit 4: =1 drive 1 supports 80 tracks, always valid bit 3: reserved bit 2: =1 drive 0 determined bit 1: =1 drive 0 is multi-rate, valid if drive determined bit 0: =1 drive 0 supports 80 tracks, always valid Note: EHD BIOS sets this byte to 01h and never alters it again 90h BYTE Diskette drive 0 media state 91h BYTE Diskette drive 1 media state bits 7-6: Data rate 00=500kbps, 01=300kbps, 10=250kbps, 11=1Mbps bit 5: =1 if double stepping required (e.g. 360kB in 1.2MB) bit 4: =1 if media established bit 3: =1 if drive capable of supporting 4MB media bits 2-0: on exit from BIOS, contain: 000 trying 360kB in 360kB 001 trying 360kB in 1.2MB 010 trying 1.2MB in 1.2MB 011 360kB in 360kB established 100 360kB in 1.2MB established 101 1.2MB in 1.2MB established 110 reserved 111 all other formats/drives 92h BYTE {Diskette drive 0 media state at start of operation} officially "Drive 2 media state" bits 7-3 as above bit 2: =1 if multiple data rate capability determined bit 1: =1 if multiple data rate capability bit 0: =1 if drive has 80 tracks, =0 if 40 tracks 92h BYTE [Olivetti Quaderno] Hard Disk powerdown countdown in clock ticks (HD turned off when counter reaches zero) 93h BYTE {Diskette drive 1 media state at start of operation} officially "Drive 3 media state" bits 7-3 as above bit 2: =1 if multiple data rate capability determined bit 1: =1 if multiple data rate capability bit 0: =1 if drive has 80 tracks, =0 if 40 tracks 94h BYTE Diskette drive 0 current track number 95h BYTE Diskette drive 1 current track number 96h BYTE Keyboard status byte 1 bit 7 =1 read-ID in progress bit 6 =1 last code read was first of two ID codes bit 5 =1 force Num Lock if read-ID and enhanced keyboard bit 4 =1 enhanced keyboard installed bit 3 =1 Right Alt pressed bit 2 =1 Right Ctrl pressed bit 1 =1 last code read was E0h bit 0 =1 last code read was E1h 97h BYTE Keyboard status byte 2 bit 7 =1 keyboard transmit error flag bit 6 =1 LED update in progress bit 5 =1 RESEND received from keyboard bit 4 =1 ACK received from keyboard bit 3 reserved, must be zero bit 2 Caps Lock LED bit 1 Num Lock LED bit 0 Scroll Lock LED 98h DWORD Timer2: [AT, PS exc Mod 30] ptr to user wait-complete flag (see INT 15, AX=8300h) 9Ch DWORD Timer2: [AT, PS exc Mod 30] user wait count in microseconds A0h BYTE Timer2: [AT, PS exc Mod 30] Wait active flag: bit 7 =1 wait time elapsed bits 6-1 reserved bit 0 =1 INT 15h, AH=86h has occurred A1h BYTE bit 5 set if LAN Support Program Interrupt Arbitrator present (DEVICE=DXMA0MOD.SYS) A2h 6 BYTEs reserved for network adapters A4h DWORD [PS/2 Mod 30] Saved Fixed Disk Interrupt Vector A8h DWORD Video: EGA/MCGA/VGA ptr to Video Save Pointer Table (see below) ACh-AFh reserved B0h BYTE (Phoenix 386 BIOS 1.10 10a) loop count for hard disk timeout and delaying when beeping due to full keyboard buffer B0h DWORD ptr to 3363 Optical disk driver or BIOS entry point. When 3363 BIOS present, the signature "OPTIC ",00h occurs 3 bytes beyond this entry point. When 3363 BIOS and 3363 File System Driver present, the signature "FILE SYSTEM DRIVER",00h occurs 3 bytes beyond this entry point. B0h 16 BYTEs (1988 Phoenix 386 BIOS 1.10 03) drive parameters for hard disk type 48 (see INT 41,INT 46) B4h WORD reserved B5h BYTE (Dell 4xxDE) bit 2: ??? (related to disk drives) bit 5: page tables set to allow Weitek addressing in real mode bit 6: Weitek math coprocessor present B6h 3 BYTEs reserved for POST? B9h 7 BYTEs ??? C0h 16 BYTEs (1988 Phoenix 386 BIOS 1.10 03) drive parameters for hard disk type 49 (see INT 41,INT 46) C0h 14 BYTEs reserved CEh WORD count of days since last boot D0h-EFh reserved D0h BYTE [Digiboard MV/4] length of data table D0h BYTE [EHD floppy] bit 4: installation completed bits 3-0: drives 0-3 D1h BYTE [Digiboard MV/4] product ID D2h WORD [Digiboard MV/4] base address found D4h BYTE [Digiboard MV/4] ports D5h BYTE [Digiboard MV/4] IRQ D5h BYTE [EHD floppy] total number of floppy disk controllers in system D6h BYTE [EHD floppy] AND-bits for DL to adjust port address (FFh if at 03Fxh and 7Fh if at 037xh) D6h WORD [Digiboard MV/4] keyboards found D7h BYTE [EHD floppy] drive 0 diskette media status bits 7-6: Data rate: 00=500kbps,01=300kbps,10=250k,11=1M/S bit 5: =1 if double stepping reqd (e.g. 360kB in 1.2MB) bit 4: =1 if media established bit 3: reserved bits 2-0: on exit from BIOS, contain: 000 trying 360kB in 360kB 001 trying 360kB in 1.2MB 010 trying 1.2MB in 1.2MB 011 360kB in 360kB established 100 360kB in 1.2MB established 101 1.2MB in 1.2MB established 110 reserved (2M8?) 111 all other formats/drives the value in 4D7 gets sent to 490 (diskette0 media state) D8h BYTE [EHD floppy] drive 1 diskette media state D8h WORD [Digiboard MV/4] mice found D9h BYTE [EHD floppy] drive 2 diskette media state DAh BYTE [Digiboard MV/4] current port (used by VGA initialization only) DAh BYTE [EHD floppy] drive 3 diskette media state DBh BYTE [Digiboard MV/4] master 8259 mask (used by VGA init only) DBh BYTE [EHD floppy] drive 0 needs recalibaration DCh BYTE [Digiboard MV/4] slave 8259 mask (used by VGA init only) DCh BYTE [EHD floppy] drive 1 needs recalibaration DDh BYTE [EHD floppy] drive 2 needs recalibaration DEh BYTE [EHD floppy] drive 3 needs recalibaration E0h-EFh [Phoenix 386 BIOS] drive parameter table for first hard disk if configurable "type 47" E3h BYTE [EHD floppy] drive 0 diskette type (from jumpers) 01h undefined by diskette change (360K) 02h 1.2M 03h 720K 04h 1.44M 05h 2.88M E4h BYTE [EHD floppy] drive 1 diskette type (from jumpers) E5h BYTE [EHD floppy] drive 2 diskette type (from jumpers) E6h BYTE [EHD floppy] drive 3 diskette type (from jumpers) EAh WORD [Omti controller] segment of extended BIOS data area??? drive parameter tables stored in specified segment ECh WORD (Dell 4xxDE BIOS A11) loop count for delays F0h-FFh reserved for user 100h BYTE Print Screen Status byte 10Eh BYTE state of BREAK at start of BASICA.COM execution 10Fh BYTE flag: 02h if BASICA v2.10 running 116h DWORD INT 1Bh at start of BASICA.COM execution 11Ah DWORD INT 24h at start of BASICA.COM execution Format of Interrupt Vector Table data storage (from 0000h:0000h): Offset Size Description 31Dh 16 BYTEs user-definable hard disk parameters for drive type 47 (1989 AMI 386sx BIOS) (see INT 41,INT 46) 32Dh 16 BYTEs user-definable hard disk parameters for drive type 48 (1989 AMI 386sx BIOS) (see INT 41,INT 46) Note: these fields are used is the AMI BIOS setup is set to use the top of the interrupt table for the extended BIOS data area Format of Extended BIOS Data Area (see 40:0Eh for ptr) [PS only] Offset Size Description 00h BYTE Length of EBDA in kilobytes 01h 15 BYTEs reserved 17h BYTE Number of entries in POST error log (0-5) 18h 5 WORDs POST error log (each word is a POST error number) 22h DWORD Pointing Device Driver entry point 26h BYTE Pointing Device Flags 1 bit 7: command in progress bit 6: resend byte (FAh) received bit 5: acknowledge byte (FEh) received bit 4: error byte (FCh) received bit 3: unexpected value received bits 2-0: index count for auxiliary device data at 28h 27h BYTE Pointing Device Flags 2 bit 7: device driver far call flag bits 6-3: reserved bits 2-0: package size (number of bytes received) - 1 28h 8 BYTEs Pointing Device Auxiliary Device Data 30h DWORD Vector for INT 07h stored here during 80387 interrupt 34h DWORD Vector for INT 01h stored here during INT 07h emulation 38h BYTE Scratchpad for 80287/80387 interrupt code 39h WORD Timer3: Watchdog timer initial count 3Bh BYTE ??? seen non-zero on Model 30 3Ch BYTE ??? 3Dh 16 BYTEs Fixed Disk parameter table for drive 0 (for older machines which don't directly support the installed drive) 4Dh 16 BYTEs Fixed Disk parameter table for drive 1 (for older machines which don't directly support the installed drive) 5Dh-67h ??? 68h BYTE cache control bits 7-2 unused (0) bit 1: CPU cache failed test bit 0: CPU cache disabled 69h-6Bh ??? 6Ch BYTE Fixed disk: (=FFh on ESDI systems) bits 7-4: Channel number 00-0Fh bits 3-0: DMA arbitration level 00-0Eh 6Dh BYTE ??? 6Eh WORD current typematic setting (see INT 16/AH=03h) 70h BYTE number of attached hard drives 71h BYTE hard disk 16-bit DMA channel 72h BYTE interrupt status for hard disk controller (1Fh on timeout) 73h BYTE hard disk operation flags bit 7: controller issued operation-complete INT 76h bit 6: controller has been reset bits 5-0: unused (0) 74h DWORD old INT 76h vector 78h BYTE hard disk DMA type typically 44h for reads and 4Ch for writes 79h BYTE status of last hard disk operation 7Ah BYTE hard disk timeout counter 7Bh-7Dh 7Eh 8 WORDs storage for hard disk controller status 8Eh-E6h E7h BYTE floppy drive type bit 7: drive(s) present bits 6-2: unused (0) bit 1: drive 1 is 5.25" instead of 3.5" bit 0: drive 0 is 5.25" E8h-EBh ECh BYTE hard disk parameters flag bit 7: parameters loaded into EBDA bits 6-0: unused (0) EDh BYTE ??? EEh BYTE CPU family ID (03h = 386, 04h = 486, etc.) (see INT 15/AH=C9h) EFh BYTE CPU stepping (see INT 15/AH=C9h) F0h 39 BYTEs ??? 117h WORD keyboard ID (see INT 16/AH=0Ah) (most commonly 41ABh) 119h BYTE ??? 11Ah BYTE non-BIOS INT 18h flag bits 7-1: unused (0) bit 0: set by BIOS before calling user INT 18h at offset 11Dh 11Bh 2 BYTE ??? 11Dh DWORD user INT 18h vector if BIOS has re-hooked INT 18h 121h and up: ??? seen non-zero on Model 60 3F0h BYTE Fixed disk buffer (???!!!) Format of Video Save Pointer Table [EGA/VGA/MCGA only]: Offset Size Description 00h DWORD ptr to Video Parameter Table 04h DWORD ptr to Parameter Dynamic Save Area, else 0 [EGA/VGA only] 08h DWORD ptr to Alphanumeric Character Set Override, else 0 0Ch DWORD ptr to Graphics Character Set Override, else 0 10h DWORD [VGA only] ptr to Secondary Save Pointer Table, must be valid 14h DWORD reserved, zero 18h DWORD reserved, zero Note: table initially in ROM, copy to RAM to alter, then update 40h:A8h. Format of Secondary Video Save Pointer Table [VGA only]: Offset Size Description 00h WORD Length of this table in bytes, including this word (1Ah) 02h DWORD ptr to Display Combination Code Table, must be valid 06h DWORD ptr to second Alphanumeric Character Set Override, else 0 0Ah DWORD ptr to User Palette Profile Table, else 0 0Eh DWORD reserved, zero 12h DWORD reserved, zero 16h DWORD reserved, zero Note: table initially in ROM, copy to RAM to alter, then alter Save Ptr Table. Format of Video Parameter Table [EGA, VGA only]: An array of 23 [EGA] or 29 [VGA] elements, each element being 64 bytes long. Elements appear in the order: 00h-03h Modes 00h-03h in 200-line CGA emulation mode 04h-0Eh Modes 04h-0Eh 0Fh-10h Modes 0Fh-10h when only 64kB RAM on adapter 11h-12h Modes 0Fh-10h when >64kB RAM on adapter 13h-16h Modes 00h-03h in 350-line mode 17h VGA Modes 00h or 01h in 400-line mode 18h VGA Modes 02h or 03h in 400-line mode 19h VGA Mode 07h in 400-line mode 1Ah-1Ch VGA Modes 11h-13h Format of Video Parameter Table element [EGA, VGA only]: Offset Size Description 00h BYTE Columns on screen (see 40h:4Ah) 01h BYTE Rows on screen minus one (see 40h:84h) 02h BYTE Height of character in scan lines (see 40h:85h) 03h WORD Size of video buffer (see 40h:4Ch) 05h 4 BYTEs Values for Sequencer Registers 1-4 09h BYTE Value for Miscellaneous Output Register 0Ah 25 BYTEs Values for CRTC Registers 00h-18h 23h 20 BYTEs Values for Attribute Controller Registers 00h-13h 37h 9 BYTEs Values for Graphics Controller Registers 00h-08h Format of Video Parameter Table [MCGA only] {guesswork from inspection}: - 16 triplet BYTEs of R,G,B DAC info for 16 colors; - An array of 11 elements, each element being 32 bytes long. Elements appear in the order: Modes 00h,01h in 200-line mode for digital displays Modes 00h,01h in 400-line mode for analog displays Modes 02h,03h in 200-line mode for digital displays Modes 02h,03h in 400-line mode for analog displays Modes 04h,05h in 200-line mode for digital displays Modes 04h,05h in 400-line mode for analog displays Mode 06h in 200-line mode for digital displays Mode 06h in 400-line mode for analog displays Mode 11h Mode 13h in 200-line mode for digital displays Mode 13h in 400-line mode for analog displays Format of Video Parameter Table element [MCGA only]: Offset Size Description 00h BYTE Columns on screen (see 40h:4Ah) 01h BYTE Rows on screen minus one (see 40h:84h) 02h BYTE Height of character in scan lines (see 40h:85h) 03h WORD Size of video buffer (see 40h:4Ch) 05h WORD ??? always zero 07h 21 BYTEs Video data registers 00h-14h to port 3D5h indexed by 3D4h 1Ch BYTE PEL Mask to port 3C6h 1Dh BYTE CGA Mode Control to port 3D8h 1Eh BYTE CGA Border Control to port 3D9h 1Fh BYTE Extended Mode Control to port 3DDh Format of Video Parameter Dynamic Save Area [EGA, VGA only]: Offset Size Description 00h 16 BYTEs Last data written to Attribute Contr. Palette Registers 0-15 10h BYTE Last data written to Attribute Controller Overscan Register 11h-FFh Reserved Note: Need for table was that EGA registers were write-only. Note: If default values (from the Video Parameter Table) are over-ridden at a mode set by the VGA User Palette Profile Table, then the Dynamic Save Area is updated with the default values, not the User Profile ones. Format of Alphanumeric Character Set Override: Offset Size Description 00h BYTE Length in bytes of each character in font table 01h BYTE Character generator RAM bank to load, 0=normal 02h WORD Number of characters in font table, normally 256 04h WORD Code of first character in font table, normally 0 06h DWORD ptr to font table 0Ah BYTE Displayable rows (FFh=use maximum calculated value) 0Bh BYTEs Array of mode values to which this font is to pertain BYTE FFh end of array Format of Second Alphanumeric Character Set Override: Authorities differ, some say same as first override above, but IBM say: Offset Size Description 00h BYTE Length in bytes of each character in font table 01h BYTE Character generator RAM bank to load, normally non-zero 02h BYTE reserved 03h DWORD ptr to font table 07h BYTEs Array of mode values to which this font is to pertain BYTE FFh end of array Format of Graphics Character Set Override: Offset Size Description 00h BYTE Number of displayable character rows 01h WORD Length in bytes of each character in font table 03h DWORD ptr to font table 07h BYTEs Array of mode values to which this font is to pertain BYTE FFh end of array Format of Display Combination Code Table [VGA only]: Offset Size Description 00h BYTE Number of entries in the DCC table at offset 04h 01h BYTE Version number 02h BYTE Maximum display type code that can appear in DCC table 03h BYTE reserved 04h 2N BYTEs Each pair of bytes gives a valid display combination Meaning of each byte: 00h no display 01h MDA with mono display 02h CGA with color display 03h reserved 04h EGA with color display 05h EGA with mono display 06h Professional Graphics Controller 07h VGA with mono display 08h VGA with color display 09h reserved 0Ah MCGA with digital color display 0Bh MCGA with analog mono display 0Ch MCGA with analog color display FFh unrecognised video system Format of User Palette Profile Table [VGA only]: Offset Size Description 00h BYTE Underlining: 01h=enable in all alphanumeric modes 00h=enable in monochrome alphanumeric modes only FFh=disable in all alphanumeric modes 01h BYTE reserved 02h WORD reserved 04h WORD Number (0-17) of Attribute Controller registers in table 06h WORD Index (0-16) of first Attribute Controller register in table 08h DWORD ptr to table of Attribute Controller registers to override Table is an array of BYTEs. 0Ch WORD Number (0-256) of video DAC Color registers in table 0Eh WORD Index (0-255) of first video DAC Color register in table 10h DWORD ptr to table of video DAC Color registers to override Table is ??? triplets ??? of BYTEs??? 14h BYTEs array of mode values to which this profile is to pertain BYTE FFh end of array -----------CONTRIBUTORS---------------------- Wim Osterholt <wim@djo.wtm.tudelft.nl> or Wim Osterholt 2:512/56 EHD floppy = 'KEGAN 4.0M Floppy Drive Controller.', 'ACME FX4-K7tb2 v:2.5 11/5/91'