The state block you posted looks possible. The last two bytes are supposed to be the CRC, so if you want to steal the crc routine from the kernel you could validate it in your readout. The 8 bytes before the CRC belong to the Hijack stuff. Take a look inside the kernel empeg_state.c file to see more about the CRC and other bytes that may mean something.

-ml