This repository contains a dump of the Anne Pro 2 Keyboard bootloader. This bootloader resides on the Keyboard Matrix
controller IC (U2). This is the code that runs when you boot the uController while holding down esc
key.
The bootloader.bin
file is a direct dump of the flash content. Meanwhile the bootloader.idb
is an IDA database
for my current reversing work.
The writeFirmware.js
is largely copy-pasta from the Windows distribution of ObinsKit app. It contains the important routines
for firmware download through the Obins IAP. I will soonTM write a tool for flashing file onto the Anne Pro 2 as a POC.
The board has 2 revisions afaik. the C15 and C18 version. On the case, C15 seems to say ObinsLab on the back, where C18 will say Anne Pro.
You can also tell by putting the board in IAP mode and check lsusb
result. C15 has product id 8008 where as C18 has 8009.
This repository currently only contains dumped bootloader from the C15. Afaik they are different, but should be mostly pin mapping difference and maybe some bigger difference on the LED controller side since the C15 that controller run crystal-less and C18 gave it a crystal.
If anyone owns a C18 and a Jtag tool, it'd be great if you can dump that.
Look around in this Github Org it has all kind of information about the Anne Pro 2. Inclduing a copy of my current reversing schematics.
If you are interested in helping out, feel free to look around in this Org or contact me Codetector[email protected].