Finding RTSP URL for firstrend cameras

[MrRedPants]

I have (had) two firstrend NVRs - I've dumped them for BlueIris - I am having a heck of a time figuring out these cameras RTSP video feed URLs - they don't seem to have ONVIF. I think is Anyka (?) - when I telnet I get a prompt for that user. The web interface uses flash. I tried using Fiddler but between the java and the flash based firmware, I'm not getting anywhere. The NVR uses EseeCloud. I tried wireshark as well and there aren't any RTSP packets. Only thing I see are ports port 52428 and 52429 from camera sending information to port 80 on my laptop.

This is the device info for these cameras:
Device Model
IPC
Software Version
2.4.1(2.6.10_391806)
SDK
2.4.1.0
Release Time
2017/10/14 20:28:23