Reverse engineering the Attack Shark keyboard protocol

Attack Shark, Epomaker and Akko sell hundreds of keyboards built on the same ROYUAN hardware, configurable only through Windows software. Here is the wire protocol: two colliding command sets, per-key colour that lands in flash, and a firmware image read out of a rescued binary.