a lot of tracing through asm. RE is hard.
figured out what a memmove looks like
recast code as data
found the wait message.
teased out another data segment
getting into the weeds here
I think we've teased out the NVR read and address code.