qdot/emokit — Issue #8: Headset bought in 04/2011 has different key
Author: se210
Created: 2012-01-07 09:45:31+00:00
State: open

Hi guys, I found out that the device I bought in April, 2011 has yet another key from the one posted in https://github.com/qdot/emokit/issues/4.

I had trouble following through the directions that eskel posted for extracting the key (the hardware breakpoint was not working for me, so I was unable to follow his directions from there on). I resorted to breaking on memcpy function call and looking for when the argument n = 0x10 (or 16 in decimal) to get my key. The key I found is '\x4E\x00\x53\x54\x38\x10\x37\x42\x4E\x00\x53\x48\x38\x00\x37\x50'.

Also, filter = hid.HidDeviceFilter(vendor_id=0x21A1, product_name='Brain Waves') does not work for me as the product_name has been changed. I found two devices with vendor_id=0x21A1 and product_id=0x0001. One is named 'EPOC BCI' and the other is named '00800000046'. I ended up using the one named in numbers as that was the one that provided me with the raw data.

I would appreciate it if someone knowledgeable with OllyDbg can re-outline the steps necessary in obtaining the key so that other people don't have to suffer through what I did to find the key. I think the Python code also needs to be updated with the newer keys and a better method for searching the Emotiv device.