@synlogic yeah, 0xFFD8 is the start of a jpeg/jffif file. and then there are other jpeg encodings. However the dump I got had no 0xFFD9 indicating file end.
I need to back up and rewrite what I have to make it cleaner to take the next steps.
I can toggle the red/recording LED off and on now, so I am definitely making progress.