USB流量分析
一、流量抓取
使用wireshark可以方便地抓取流量，选择USBPcap接口
抓取到的USB流量，其包括从USB接口通过的所有流量（USB鼠标、USB键盘等）
二、流量过滤
保存到数据包后，使用tshark过滤流量：
tshark -r mouse.pcap -T fields -e usb.capdata //mouses.pcap 保存的数据包文件名 ... 0102000003000000 0102000004000000 0102000005000000 0102fdff05000000 0102feff05000000 0102ffff03000000 0102feff04000000 0102ffff02000000 0102ffff02000000 0102fdff03000000 0102fdff03000000 0102fcff02000000 0102fcff03000000 0102fcff03000000 0102fdff02000000 0102fdff03000000 0102fdff02000000 0102fdff03000000 0102feff01000000 0102feff02000000 0102feff02000000 0102ffff01000000 0102030000000000 0102060000000000 01021100ffff0000 0102080000000000 0102080000000000 0102070000000000 0102080000000000 0102070000000000 0102030000000000 0102ffffffff0000 0100feff00000000 0100ffff00000000 0100feff00000000 0100feffffff0000 0100fefffeff0000 ...
三、流量分析
当作为USB鼠标的流量时，一行数据表示一个鼠标操作，
一行数据包含八个字节，第一字节为01
第二字节为按键号，即鼠标发送数据时的按键状态
01：左键按下 02：右键按下 00：未按下任何键
第三五字节分别为操作XY坐标（16进制）
当作为USB键盘的流量时，一行数据表示一个键盘按键操作
一行数据包含八个字节，第一字节的8bit分别表示
|--bit0: Left Control是否按下，按下为1 |--bit1: Left Shift 是否按下，按下为1 |--bit2: Left Alt 是否按下，按下为1 |--bit3: Left GUI（Windows键） 是否按下，按下为1 |--bit4: Right Control是否按下，按下为1 |--bit5: Right Shift 是否按下，按下为1 |--bit6: Right Alt 是否按下，按下为1 |--bit7: Right GUI 是否按下，按下为1
第三字节开始即为触发的按键（可以有多个键同时被按下），查表可知按键内容
Usage ID | Usage Name | Usage Type | AT-101 | PC-AT | Mac | Unix | Boot |
00-00 | Reserved | ||||||
01 | Keyboard ErrorRollOver1 | Sel | N/A | ✓ | ✓ | ✓ | 4/101/104 |
02 | Keyboard POSTFail1 | Sel | N/A | ✓ | ✓ | ✓ | 4/101/104 |
03 | Keyboard ErrorUndefined1 | Sel | N/A | ✓ | ✓ | ✓ | 4/101/104 |
04 | Keyboard a and A2 | Sel | 31 | ✓ | ✓ | ✓ | 4/101/104 |
05 | Keyboard b and B | Sel | 50 | ✓ | ✓ | ✓ | 4/101/104 |
06 | Keyboard c and C2 | Sel | 48 | ✓ | ✓ | ✓ | 4/101/104 |
07 | Keyboard d and D | Sel | 33 | ✓ | ✓ | ✓ | 4/101/104 |
08 | Keyboard e and E | Sel | 19 | ✓ | ✓ | ✓ | 4/101/104 |
09 | Keyboard f and F | Sel | 34 | ✓ | ✓ | ✓ | 4/101/104 |
0A | Keyboard g and G | Sel | 35 | ✓ | ✓ | ✓ | 4/101/104 |
0B | Keyboard h and H | Sel | 36 | ✓ | ✓ | ✓ | 4/101/104 |
0C | Keyboard i and I | Sel | 24 | ✓ | ✓ | ✓ | 4/101/104 |
0D | Keyboard j and J | Sel | 37 | ✓ | ✓ | ✓ | 4/101/104 |
0E | Keyboard k and K | Sel | 38 | ✓ | ✓ | ✓ | 4/101/104 |
0F | Keyboard l and L | Sel | 39 | ✓ | ✓ | ✓ | 4/101/104 |
10 | Keyboard m and M2 | Sel | 52 | ✓ | ✓ | ✓ | 4/101/104 |
11 | Keyboard n and N | Sel | 51 | ✓ | ✓ | ✓ | 4/101/104 |
12 | Keyboard o and O2 | Sel | 25 | ✓ | ✓ | ✓ | 4/101/104 |
13 | Keyboard p and P2 | Sel | 26 | ✓ | ✓ | ✓ | 4/101/104 |
14 | Keyboard q and Q2 | Sel | 17 | ✓ | ✓ | ✓ | 4/101/104 |
15 | Keyboard r and R | Sel | 20 | ✓ | ✓ | ✓ | 4/101/104 |
16 | Keyboard s and S | Sel | 32 | ✓ | ✓ | ✓ | 4/101/104 |
17 | Keyboard t and T | Sel | 21 | ✓ | ✓ | ✓ | 4/101/104 |
18 | Keyboard u and U | Sel | 23 | ✓ | ✓ | ✓ | 4/101/104 |
Usage ID | Usage Name | Usage Type | AT-101 | PC-AT | Mac | Unix | Boot |
19 | Keyboard v and V | Sel | 49 | ✓ | ✓ | ✓ | 4/101/104 |
1A | Keyboard w and W2 | Sel | 18 | ✓ | ✓ | ✓ | 4/101/104 |
1B | Keyboard x and X2 | Sel | 47 | ✓ | ✓ | ✓ | 4/101/104 |
1C | Keyboard y and Y2 | Sel | 22 | ✓ | ✓ | ✓ | 4/101/104 |
1D | Keyboard z and Z2 | Sel | 46 | ✓ | ✓ | ✓ | 4/101/104 |
1E | Keyboard 1 and !2 | Sel | 2 | ✓ | ✓ | ✓ | 4/101/104 |
1F | Keyboard 2 and @2 | Sel | 3 | ✓ | ✓ | ✓ | 4/101/104 |
20 | Keyboard 3 and #2 | Sel | 4 | ✓ | ✓ | ✓ | 4/101/104 |
21 | Keyboard 4 and $2 | Sel | 5 | ✓ | ✓ | ✓ | 4/101/104 |
22 | Keyboard 5 and %2 | Sel | 6 | ✓ | ✓ | ✓ | 4/101/104 |
23 | Keyboard 6 and ∧2 | Sel | 7 | ✓ | ✓ | ✓ | 4/101/104 |
24 | Keyboard 7 and &2 | Sel | 8 | ✓ | ✓ | ✓ | 4/101/104 |
25 | Keyboard 8 and *2 | Sel | 9 | ✓ | ✓ | ✓ | 4/101/104 |
26 | Keyboard 9 and (2 | Sel | 10 | ✓ | ✓ | ✓ | 4/101/104 |
27 | Keyboard 0 and )2 | Sel | 11 | ✓ | ✓ | ✓ | 4/101/104 |
28 | Keyboard Return (ENTER)3 | Sel | 43 | ✓ | ✓ | ✓ | 4/101/104 |
29 | Keyboard ESCAPE | Sel | 110 | ✓ | ✓ | ✓ | 4/101/104 |
2A | Keyboard DELETE (Backspace)4 | Sel | 15 | ✓ | ✓ | ✓ | 4/101/104 |
2B | Keyboard Tab | Sel | 16 | ✓ | ✓ | ✓ | 4/101/104 |
2C | Keyboard Spacebar | Sel | 61 | ✓ | ✓ | ✓ | 4/101/104 |
2D | Keyboard - and (underscore)2 | Sel | 12 | ✓ | ✓ | ✓ | 4/101/104 |
2E | Keyboard = and +2 | Sel | 13 | ✓ | ✓ | ✓ | 4/101/104 |
2F | Keyboard [ and {2 | Sel | 27 | ✓ | ✓ | ✓ | 4/101/104 |
30 | Keyboard ] and }2 | Sel | 28 | ✓ | ✓ | ✓ | 4/101/104 |
31 | Keyboard \and | | Sel | 29 | ✓ | ✓ | ✓ | 4/101/104 |
32 | Keyboard Non-US # and ˜5 | Sel | 42 | ✓ | ✓ | ✓ | 4/101/104 |
33 | Keyboard ; and :2 | Sel | 40 | ✓ | ✓ | ✓ | 4/101/104 |
34 | Keyboard ‘ and “2 | Sel | 41 | ✓ | ✓ | ✓ | 4/101/104 |
35 | Keyboard Grave Accent and Tilde2 | Sel | 1 | ✓ | ✓ | ✓ | 4/101/104 |
36 | Keyboard , and <2 | Sel | 53 | ✓ | ✓ | ✓ | 4/101/104 |
37 | Keyboard . and >2 | Sel | 54 | ✓ | ✓ | ✓ | 4/101/104 |
38 | Keyboard / and ?2 | Sel | 55 | ✓ | ✓ | ✓ | 4/101/104 |
39 | Keyboard Caps Lock6 | Sel | 30 | ✓ | ✓ | ✓ | 4/101/104 |
3A | Keyboard F1 | Sel | 112 | ✓ | ✓ | ✓ | 4/101/104 |
3B | Keyboard F2 | Sel | 113 | ✓ | ✓ | ✓ | 4/101/104 |
3C | Keyboard F3 | Sel | 114 | ✓ | ✓ | ✓ | 4/101/104 |
3D | Keyboard F4 | Sel | 115 | ✓ | ✓ | ✓ | 4/101/104 |
Usage ID | Usage Name | Usage Type | AT-101 | PC-AT | Mac | Unix | Boot |
3E | Keyboard F5 | Sel | 116 | ✓ | ✓ | ✓ | 4/101/104 |
3F | Keyboard F6 | Sel | 117 | ✓ | ✓ | ✓ | 4/101/104 |
40 | Keyboard F7 | Sel | 118 | ✓ | ✓ | ✓ | 4/101/104 |
41 | Keyboard F8 | Sel | 119 | ✓ | ✓ | ✓ | 4/101/104 |
42 | Keyboard F9 | Sel | 120 | ✓ | ✓ | ✓ | 4/101/104 |
43 | Keyboard F10 | Sel | 121 | ✓ | ✓ | ✓ | 4/101/104 |
44 | Keyboard F11 | Sel | 122 | ✓ | ✓ | ✓ | 4/101/104 |
45 | Keyboard F12 | Sel | 123 | ✓ | ✓ | ✓ | 4/101/104 |
46 | Keyboard PrintScreen7 | Sel | 124 | ✓ | ✓ | ✓ | 4/101/104 |
47 | Keyboard Scroll Lock6 | Sel | 125 | ✓ | ✓ | ✓ | 4/101/104 |
48 | Keyboard Pause7 | Sel | 126 | ✓ | ✓ | ✓ | 4/101/104 |
49 | Keyboard Insert7 | Sel | 75 | ✓ | ✓ | ✓ | 4/101/104 |
4A | Keyboard Home7 | Sel | 80 | ✓ | ✓ | ✓ | 4/101/104 |
4B | Keyboard PageUp7 | Sel | 85 | ✓ | ✓ | ✓ | 4/101/104 |
4C | Keyboard Delete Forward7,8 | Sel | 76 | ✓ | ✓ | ✓ | 4/101/104 |
4D | Keyboard End7 | Sel | 81 | ✓ | ✓ | ✓ | 4/101/104 |
4E | Keyboard PageDown7 | Sel | 86 | ✓ | ✓ | ✓ | 4/101/104 |
4F | Keyboard RightArrow7 | Sel | 89 | ✓ | ✓ | ✓ | 4/101/104 |
50 | Keyboard LeftArrow7 | Sel | 79 | ✓ | ✓ | ✓ | 4/101/104 |
51 | Keyboard DownArrow7 | Sel | 84 | ✓ | ✓ | ✓ | 4/101/104 |
52 | Keyboard UpArrow7 | Sel | 83 | ✓ | ✓ | ✓ | 4/101/104 |
53 | Keypad Num Lock and Clear6 | Sel | 90 | ✓ | ✓ | ✓ | 4/101/104 |
54 | Keypad /7 | Sel | 95 | ✓ | ✓ | ✓ | 4/101/104 |
55 | Keypad * | Sel | 100 | ✓ | ✓ | ✓ | 4/101/104 |
56 | Keypad - | Sel | 105 | ✓ | ✓ | ✓ | 4/101/104 |
57 | Keypad + | Sel | 106 | ✓ | ✓ | ✓ | 4/101/104 |
58 | Keypad ENTER3 | Sel | 108 | ✓ | ✓ | ✓ | 4/101/104 |
59 | Keypad 1 and End | Sel | 93 | ✓ | ✓ | ✓ | 4/101/104 |
5A | Keypad 2 and Down Arrow | Sel | 98 | ✓ | ✓ | ✓ | 4/101/104 |
5B | Keypad 3 and PageDn | Sel | 103 | ✓ | ✓ | ✓ | 4/101/104 |
5C | Keypad 4 and Left Arrow | Sel | 92 | ✓ | ✓ | ✓ | 4/101/104 |
5D | Keypad 5 | Sel | 97 | ✓ | ✓ | ✓ | 4/101/104 |
5E | Keypad 6 and Right Arrow | Sel | 102 | ✓ | ✓ | ✓ | 4/101/104 |
5F | Keypad 7 and Home | Sel | 91 | ✓ | ✓ | ✓ | 4/101/104 |
60 | Keypad 8 and Up Arrow | Sel | 96 | ✓ | ✓ | ✓ | 4/101/104 |
61 | Keypad 9 and PageUp | Sel | 101 | ✓ | ✓ | ✓ | 4/101/104 |
62 | Keypad 0 and Insert | Sel | 99 | ✓ | ✓ | ✓ | 4/101/104 |
Usage ID | Usage Name | Usage Type | AT-101 | PC-AT | Mac | Unix | Boot |
63 | Keypad . and Delete | Sel | 104 | ✓ | ✓ | ✓ | 4/101/104 |
64 | Keyboard Non-US \and |9,10 | Sel | 45 | ✓ | ✓ | ✓ | 4/101/104 |
65 | Keyboard Application11 | Sel | 129 | ✓ | ✓ | 104 | |
66 | Keyboard Power1 | Sel | ✓ | ✓ | |||
67 | Keypad = | Sel | ✓ | ||||
68 | Keyboard F13 | Sel | ✓ | ||||
69 | Keyboard F14 | Sel | ✓ | ||||
6A | Keyboard F15 | Sel | ✓ | ||||
6B | Keyboard F16 | Sel | |||||
6C | Keyboard F17 | Sel | |||||
6D | Keyboard F18 | Sel | |||||
6E | Keyboard F19 | Sel | |||||
6F | Keyboard F20 | Sel | |||||
70 | Keyboard F21 | Sel | |||||
71 | Keyboard F22 | Sel | |||||
72 | Keyboard F23 | Sel | |||||
73 | Keyboard F24 | Sel | |||||
74 | Keyboard Execute | Sel | ✓ | ||||
75 | Keyboard Help | Sel | ✓ | ||||
76 | Keyboard Menu | Sel | ✓ | ||||
77 | Keyboard Select | Sel | ✓ | ||||
78 | Keyboard Stop | Sel | ✓ | ||||
79 | Keyboard Again | Sel | ✓ | ||||
7A | Keyboard Undo | Sel | ✓ | ||||
7B | Keyboard Cut | Sel | ✓ | ||||
7C | Keyboard Copy | Sel | ✓ | ||||
7D | Keyboard Paste | Sel | ✓ | ||||
7E | Keyboard Find | Sel | ✓ | ||||
7F | Keyboard Mute | Sel | ✓ | ||||
80 | Keyboard Volume Up | Sel | ✓ | ||||
81 | Keyboard Volume Down | Sel | ✓ | ||||
82 | Keyboard Locking Caps Lock12 | Sel | ✓ | ||||
83 | Keyboard Locking Num Lock12 | Sel | ✓ | ||||
84 | Keyboard Locking Scroll Lock12 | Sel | ✓ | ||||
85 | Keypad Comma13 | Sel | 107 | ||||
86 | Keypad Equal Sign14 | Sel | ✓ | ||||
87 | Keyboard International115,16 | Sel | 56 | ||||
88 | Keyboard International217 | Sel | |||||
89 | Keyboard International318 | Sel | |||||
8A | Keyboard International419 | Sel |
Usage ID | Usage Name | Usage Type | AT-101 | PC-AT | Mac | Unix | Boot |
8B | Keyboard International520 | Sel | |||||
8C | Keyboard International621 | Sel | |||||
8D | Keyboard International722 | Sel | |||||
8E | Keyboard International823 | Sel | |||||
8F | Keyboard International923 | Sel | |||||
90 | Keyboard LANG124 | Sel | |||||
91 | Keyboard LANG225 | Sel | |||||
92 | Keyboard LANG326 | Sel | |||||
93 | Keyboard LANG427 | Sel | |||||
94 | Keyboard LANG528 | Sel | |||||
95 | Keyboard LANG629 | Sel | |||||
96 | Keyboard LANG729 | Sel | |||||
97 | Keyboard LANG829 | Sel | |||||
98 | Keyboard LANG929 | Sel | |||||
99 | Keyboard Alternate Erase30 | Sel | |||||
9A | Keyboard SysReq/Attention7 | Sel | |||||
9B | Keyboard Cancel | Sel | |||||
9C | Keyboard Clear | Sel | |||||
9D | Keyboard Prior | Sel | |||||
9E | Keyboard Return | Sel | |||||
9F | Keyboard Separator | Sel | |||||
A0 | Keyboard Out | Sel | |||||
A1 | Keyboard Oper | Sel | |||||
A2 | Keyboard Clear/Again | Sel | |||||
A3 | Keyboard CrSel/Props | Sel | |||||
A4 | Keyboard ExSel | Sel | |||||
A5-AF | Reserved | ||||||
B0 | Keypad 00 | Sel | |||||
B1 | Keypad 000 | Sel | |||||
B2 | Thousands Separator31 | Sel | |||||
B3 | Decimal Separator31 | Sel | |||||
B4 | Currency Unit32 | Sel | |||||
B5 | Currency Sub-unit32 | Sel | |||||
B6 | Keypad ( | Sel | |||||
B7 | Keypad ) | Sel | |||||
B8 | Keypad { | Sel | |||||
B9 | Keypad } | Sel | |||||
BA | Keypad Tab | Sel | |||||
BB | Keypad Backspace | Sel |
Usage ID | Usage Name | Usage Type | AT-101 | PC-AT | Mac | Unix | Boot |
BC | Keypad A | Sel | |||||
BD | Keypad B | Sel | |||||
BE | Keypad C | Sel | |||||
BF | Keypad D | Sel | |||||
C0 | Keypad E | Sel | |||||
C1 | Keypad F | Sel | |||||
C2 | Keypad XOR | Sel | |||||
C3 | Keypad ∧ | Sel | |||||
C4 | Keypad % | Sel | |||||
C5 | Keypad < | Sel | |||||
C6 | Keypad > | Sel | |||||
C7 | Keypad & | Sel | |||||
C8 | Keypad && | Sel | |||||
C9 | Keypad | | Sel | |||||
CA | Keypad || | Sel | |||||
CB | Keypad : | Sel | |||||
CC | Keypad # | Sel | |||||
CD | Keypad Space | Sel | |||||
CE | Keypad @ | Sel | |||||
CF | Keypad ! | Sel | |||||
D0 | Keypad Memory Store | Sel | |||||
D1 | Keypad Memory Recall | Sel | |||||
D2 | Keypad Memory Clear | Sel | |||||
D3 | Keypad Memory Add | Sel | |||||
D4 | Keypad Memory Subtract | Sel | |||||
D5 | Keypad Memory Multiply | Sel | |||||
D6 | Keypad Memory Divide | Sel | |||||
D7 | Keypad +/- | Sel | |||||
D8 | Keypad Clear | Sel | |||||
D9 | Keypad Clear Entry | Sel | |||||
DA | Keypad Binary | Sel | |||||
DB | Keypad Octal | Sel | |||||
DC | Keypad Decimal | Sel | |||||
DD | Keypad Hexadecimal | Sel | |||||
DE-DF | Reserved | ||||||
E0 | Keyboard LeftControl | DV | 58 | ✓ | ✓ | ✓ | 4/101/104 |
E1 | Keyboard LeftShift | DV | 44 | ✓ | ✓ | ✓ | 4/101/104 |
E2 | Keyboard LeftAlt | DV | 60 | ✓ | ✓ | ✓ | 4/101/104 |
E3 | Keyboard Left GUI11,33 | DV | 127 | ✓ | ✓ | ✓ | 104 |
E4 | Keyboard RightControl | DV | 64 | ✓ | ✓ | ✓ | 101/104 |
Usage ID | Usage Name | Usage Type | AT-101 | PC-AT | Mac | Unix | Boot |
E5 | Keyboard RightShift | DV | 57 | ✓ | ✓ | ✓ | 4/101/104 |
E6 | Keyboard RightAlt | DV | 62 | ✓ | ✓ | ✓ | 101/104 |
E7 | Keyboard Right GUI11,34 | DV | 128 | ✓ | ✓ | ✓ | 104 |
E8-FFFF | Reserved |
| 00-00 | Reserved | ||||
| 1 | Keyboard | ErrorRollOver1 | |||
| 2 | Keyboard | POSTFail1 | |||
| 3 | Keyboard | ErrorUndefined1 | |||
| 4 | Keyboard | a | and | A2 | Sel |
| 5 | Keyboard | b | and | B | Sel |
| 6 | Keyboard | c | and | C2 | Sel |
| 7 | Keyboard | d | and | D | Sel |
| 8 | Keyboard | e | and | E | Sel |
| 9 | Keyboard | f | and | F | Sel |
| 0A | Keyboard | g | and | G | Sel |
| 0B | Keyboard | h | and | H | Sel |
| 0C | Keyboard | i | and | I | Sel |
| 0D | Keyboard | j | and | J | Sel |
| 0E | Keyboard | k | and | K | Sel |
| 0F | Keyboard | l | and | L | Sel |
| 10 | Keyboard | m | and | M2 | Sel |
| 11 | Keyboard | n | and | N | Sel |
| 12 | Keyboard | o | and | O2 | Sel |
| 13 | Keyboard | p | and | P2 | Sel |
| 14 | Keyboard | q | and | Q2 | Sel |
| 15 | Keyboard | r | and | R | Sel |
| 16 | Keyboard | s | and | S | Sel |
| 17 | Keyboard | t | and | T | Sel |
| 18 | Keyboard | u | and | U | Sel |
| 19 | Keyboard | v | and | V | Sel |
| 1A | Keyboard | w | and | W2 | Sel |
| 1B | Keyboard | x | and | X2 | Sel |
| 1C | Keyboard | y | and | Y2 | Sel |
| 1D | Keyboard | z | and | Z2 | Sel |
| 1E | Keyboard | 1 | and | !2 | Sel |
| 1F | Keyboard | 2 | and | @2 | Sel |
| 20 | Keyboard | 3 | and | #2 | Sel |
| 21 | Keyboard | 4 | and | $2 | Sel |
| 22 | Keyboard | 5 | and | 2% | Sel |
| 23 | Keyboard | 6 | and | ^2 | Sel |
| 24 | Keyboard | 7 | and | &2 | Sel |
| 25 | Keyboard | 8 | and | *2 | Sel |
| 26 | Keyboard | 9 | and | (2 | Sel |
| 27 | Keyboard | 0 | and | )2 | Sel |
| 28 | Keyboard | Return | (ENTER)3 | Sel | 43 |
| 29 | Keyboard | ESCAPE | Sel | 110 | 3 |
| 2A | Keyboard | DELETE | (Backspace)4 | Sel | 15 |
| 2B | Keyboard | Tab | Sel | 16 | 3 |
| 2C | Keyboard | Spacebar | Sel | 61 | 3 |
| 2D | Keyboard | - | and | (underscore)2 | Sel |
| 2E | Keyboard | = | and | 2 | Sel |
| 2F | Keyboard | [ | and | {2 | Sel |
| 30 | Keyboard | ] | and | }2 | Sel |
| 31 | Keyboard | \and | | | Sel | 29 |
| 32 | Keyboard | Non-US | # | and | ˜5 |
| 33 | Keyboard | ; | and | :2 | Sel |
| 34 | Keyboard | ‘ | and | “2 | Sel |
| 35 | Keyboard | Grave | Accent | and | Tilde2 |
| 36 | Keyboard | , | and | <2 | Sel |
| 37 | Keyboard | . | and | >2 | Sel |
| 38 | Keyboard | / | and | ?2 | Sel |
| 39 | Keyboard | Caps | Lock6 | Sel | 30 |
| 3A | Keyboard | F1 | Sel | 112 | 3 |
| 3B | Keyboard | F2 | Sel | 113 | 3 |
| 3C | Keyboard | F3 | Sel | 114 | 3 |
| 3D | Keyboard | F4 | Sel | 115 | 3 |
| 3E | Keyboard | F5 | Sel | 116 | 3 |
| 3F | Keyboard | F6 | Sel | 117 | 3 |
| 40 | Keyboard | F7 | Sel | 118 | 3 |
| 41 | Keyboard | F8 | Sel | 119 | 3 |
| 42 | Keyboard | F9 | Sel | 120 | 3 |
| 43 | Keyboard | F10 | Sel | 121 | 3 |
| 44 | Keyboard | F11 | Sel | 122 | 3 |
| 45 | Keyboard | F12 | Sel | 123 | 3 |
| 46 | Keyboard | PrintScreen7 | Sel | 124 | 3 |
| 47 | Keyboard | Scroll | Lock6 | Sel | 125 |
| 48 | Keyboard | Pause7 | Sel | 126 | 3 |
| 49 | Keyboard | Insert7 | Sel | 75 | 3 |
| 4A | Keyboard | Home7 | Sel | 80 | 3 |
| 4B | Keyboard | PageUp7 | Sel | 85 | 3 |
| 4C | Keyboard | Delete | Forward7,8 | Sel | 76 |
| 4D | Keyboard | End7 | Sel | 81 | 3 |
| 4E | Keyboard | PageDown7 | Sel | 86 | 3 |
| 4F | Keyboard | RightArrow7 | Sel | 89 | 3 |
| 50 | Keyboard | LeftArrow7 | Sel | 79 | 3 |
| 51 | Keyboard | DownArrow7 | Sel | 84 | 3 |
| 52 | Keyboard | UpArrow7 | Sel | 83 | 3 |
| 53 | Keypad | Num | Lock | and | Clear6 |
| 54 | Keypad | /7 | Sel | 95 | 3 |
| 55 | Keypad | * | Sel | 100 | 3 |
| 56 | Keypad | - | Sel | 105 | 3 |
| 57 | Keypad | + | Sel | 106 | 3 |
| 58 | Keypad | ENTER3 | Sel | 108 | 3 |
| 59 | Keypad | 1 | and | End | Sel |
| 5A | Keypad | 2 | and | Down | Arrow |
| 5B | Keypad | 3 | and | PageDn | Sel |
| 5C | Keypad | 4 | and | Left | Arrow |
| 5D | Keypad | 5 | Sel | 97 | 3 |
| 5E | Keypad | 6 | and | Right | Arrow |
| 5F | Keypad | 7 | and | Home | Sel |
| 60 | Keypad | 8 | and | Up | Arrow |
| 61 | Keypad | 9 | and | PageUp | Sel |
| 62 | Keypad | 0 | and | Insert | Sel |
| 63 | Keypad | . | and | Delete | Sel |
| 64 | Keyboard | Non-US | \and | |9,10 | Sel |
| 65 | Keyboard | Application11 | Sel | 129 | 3 |
| 66 | Keyboard | Power1 | Sel | 3 | 3 |
| 67 | Keypad | = | Sel | 3 | |
| 68 | Keyboard | F13 | Sel | 3 | |
| 69 | Keyboard | F14 | Sel | 3 | |
| 6A | Keyboard | F15 | Sel | 3 | |
| 6B | Keyboard | F16 | Sel | ||
| 6C | Keyboard | F17 | Sel | ||
| 6D | Keyboard | F18 | Sel | ||
| 6E | Keyboard | F19 | Sel | ||
| 6F | Keyboard | F20 | Sel | ||
| 70 | Keyboard | F21 | Sel | ||
| 71 | Keyboard | F22 | Sel | ||
| 72 | Keyboard | F23 | Sel | ||
| 73 | Keyboard | F24 | Sel | ||
| 74 | Keyboard | Execute | Sel | 3 | |
| 75 | Keyboard | Help | Sel | 3 | |
| 76 | Keyboard | Menu | Sel | 3 | |
| 77 | Keyboard | Select | Sel | 3 | |
| 78 | Keyboard | Stop | Sel | 3 | |
| 79 | Keyboard | Again | Sel | 3 | |
| 7A | Keyboard | Undo | Sel | 3 | |
| 7B | Keyboard | Cut | Sel | 3 | |
| 7C | Keyboard | Copy | Sel | 3 | |
| 7D | Keyboard | Paste | Sel | 3 | |
| 7E | Keyboard | Find | Sel | 3 | |
| 7F | Keyboard | Mute | Sel | 3 | |
| 80 | Keyboard | Volume | Up | Sel | 3 |
| 81 | Keyboard | Volume | Down | Sel | 3 |
| 82 | Keyboard | Locking | Caps | Lock12 | Sel |
| 83 | Keyboard | Locking | Num | Lock12 | Sel |
| 84 | Keyboard | Locking | Scroll | Lock12 | Sel |
| 85 | Keypad | Comma13 | Sel | 107 | |
| 86 | Keypad | Equal | Sign14 | Sel | 3 |
| 87 | Keyboard | International115,16 | Sel | 56 | |
| 88 | Keyboard | International217 | Sel | ||
| 89 | Keyboard | International318 | Sel | ||
| 8A | Keyboard | International419 | Sel | ||
| 8B | Keyboard | International520 | Sel | ||
| 8C | Keyboard | International621 | Sel | ||
| 8D | Keyboard | International722 | Sel | ||
| 8E | Keyboard | International823 | Sel | ||
| 8F | Keyboard | International923 | Sel | ||
| 90 | Keyboard | LANG124 | Sel | ||
| 91 | Keyboard | LANG225 | Sel | ||
| 92 | Keyboard | LANG326 | Sel | ||
| 93 | Keyboard | LANG427 | Sel | ||
| 94 | Keyboard | LANG528 | Sel | ||
| 95 | Keyboard | LANG629 | Sel | ||
| 96 | Keyboard | LANG729 | Sel | ||
| 97 | Keyboard | LANG829 | Sel | ||
| 98 | Keyboard | LANG929 | Sel | ||
| 99 | Keyboard | Alternate | Erase30 | Sel | |
| 9A | Keyboard | SysReq/Attention7 | Sel | ||
| 9B | Keyboard | Cancel | Sel | ||
| 9C | Keyboard | Clear | Sel | ||
| 9D | Keyboard | Prior | Sel | ||
| 9E | Keyboard | Return | Sel | ||
| 9F | Keyboard | Separator | Sel | ||
| A0 | Keyboard | Out | Sel | ||
| A1 | Keyboard | Oper | Sel | ||
| A2 | Keyboard | Clear/Again | Sel | ||
| A3 | Keyboard | CrSel/Props | Sel | ||
| A4 | Keyboard | ExSel | Sel | ||
| A5-AF | Reserved | ||||
| B0 | Keypad | 0 | Sel | ||
| B1 | Keypad | 0 | Sel | ||
| B2 | Thousands | Separator31 | Sel | ||
| B3 | Decimal | Separator31 | Sel | ||
| B4 | Currency | Unit32 | Sel | ||
| B5 | Currency | Sub-unit32 | Sel | ||
| B6 | Keypad | ( | Sel | ||
| B7 | Keypad | ) | Sel | ||
| B8 | Keypad | { | Sel | ||
| B9 | Keypad | } | Sel | ||
| BA | Keypad | Tab | Sel | ||
| BB | Keypad | Backspace | Sel | ||
| BC | Keypad | A | Sel | ||
| BD | Keypad | B | Sel | ||
| BE | Keypad | C | Sel | ||
| BF | Keypad | D | Sel | ||
| C0 | Keypad | E | Sel | ||
| C1 | Keypad | F | Sel | ||
| C2 | Keypad | XOR | Sel | ||
| C3 | Keypad | ^ | Sel | ||
| C4 | Keypad | % | Sel | ||
| C5 | Keypad | < | Sel | ||
| C6 | Keypad | > | Sel | ||
| C7 | Keypad | & | Sel | ||
| C8 | Keypad | && | Sel | ||
| C9 | Keypad | | | Sel | ||
| CA | Keypad | || | Sel | ||
| CB | Keypad | : | Sel | ||
| CC | Keypad | # | Sel | ||
| CD | Keypad | Space | Sel | ||
| CE | Keypad | @ | Sel | ||
| CF | Keypad | ! | Sel | ||
| D0 | Keypad | Memory | Store | Sel | |
| D1 | Keypad | Memory | Recall | Sel | |
| D2 | Keypad | Memory | Clear | Sel | |
| D3 | Keypad | Memory | Add | Sel | |
| D4 | Keypad | Memory | Subtract | Sel | |
| D5 | Keypad | Memory | Multiply | Sel | |
| D6 | Keypad | Memory | Divide | Sel | |
| D7 | Keypad | +/- | Sel | ||
| D8 | Keypad | Clear | Sel | ||
| D9 | Keypad | Clear | Entry | Sel | |
| DA | Keypad | Binary | Sel | ||
| DB | Keypad | Octal | Sel | ||
| DC | Keypad | Decimal | Sel | ||
| DD | Keypad | Hexadecimal | Sel | ||
| DE-DF | Reserved | ||||
| E0 | Keyboard | LeftControl | DV | 58 | 3 |
| E1 | Keyboard | LeftShift | DV | 44 | 3 |
| E2 | Keyboard | LeftAlt | DV | 60 | 3 |
| E3 | Keyboard | Left | GUI11,33 | DV | 127 |
| E4 | Keyboard | RightControl | DV | 64 | 3 |
| E5 | Keyboard | RightShift | DV | 57 | 3 |
| E6 | Keyboard | RightAlt | DV | 62 | 3 |
| E7 | Keyboard | Right | GUI11,34 | DV | 128 |
| E8-FFFF | Reserved | ||||
