004CEB90 > $  8B08          MOV ECX,DWORD PTR DS:[EAX]
004CEB92   .  8B11          MOV EDX,DWORD PTR DS:[ECX]
004CEB94   .  81EC 24020000 SUB ESP,224
004CEB9A   .  57            PUSH EDI
004CEB9B   .  33FF          XOR EDI,EDI
004CEB9D   .  3BD7          CMP EDX,EDI
004CEB9F   .  0F85 E5010000 JNZ haloded.004CED8A
004CEBA5   .  8D5424 28     LEA EDX,DWORD PTR SS:[ESP+28]
004CEBA9   .  8D4C24 08     LEA ECX,DWORD PTR SS:[ESP+8]
004CEBAD   .  897C24 08     MOV DWORD PTR SS:[ESP+8],EDI
004CEBB1   .  C64424 0C FF  MOV BYTE PTR SS:[ESP+C],0FF
004CEBB6   .  895424 10     MOV DWORD PTR SS:[ESP+10],EDX
004CEBBA   .  E8 513C0500   CALL haloded.00522810
004CEBBF   .  84C0          TEST AL,AL                               ;  esp + 8 is chat type, 12 player and 16 message
004CEBC1   .  0F84 12010000 JE haloded.004CECD9
004CEBC7   .  8B8424 2C0200>MOV EAX,DWORD PTR SS:[ESP+22C]
004CEBCE   .  E8 ED6B0400   CALL haloded.005157C0
004CEBD3   .  83F8 FF       CMP EAX,-1
004CEBD6   .  0F84 FD000000 JE haloded.004CECD9
004CEBDC   .  53            PUSH EBX                                 ;  0x3F + (length * 0x10)
004CEBDD   .  55            PUSH EBP                                 ;  pointer to 0x00745BA0
004CEBDE   .  57            PUSH EDI                                 ;  above two pushes aint args
004CEBDF   .  6A 01         PUSH 1
004CEBE1   .  57            PUSH EDI
004CEBE2   .  8D4C24 18     LEA ECX,DWORD PTR SS:[ESP+18]
004CEBE6   .  51            PUSH ECX                                 ;  pointer to <chat type> <player> <message> i think
004CEBE7   .  884424 24     MOV BYTE PTR SS:[ESP+24],AL              ;  player? + 28 = msg to send
004CEBEB   .  57            PUSH EDI
004CEBEC   .  8D4424 24     LEA EAX,DWORD PTR SS:[ESP+24]            ;  this is important
004CEBF0   .  894424 20     MOV DWORD PTR SS:[ESP+20],EAX
004CEBF4   .  6A 0F         PUSH 0F                                  ;  identifier of packet we're building (chat)
004CEBF6   .  57            PUSH EDI
004CEBF7   .  BA F87F0000   MOV EDX,7FF8                             ;  constant value
004CEBFC   .  B8 40667500   MOV EAX,haloded.00756640                 ;  output buffer
004CEC01   .  897C24 48     MOV DWORD PTR SS:[ESP+48],EDI            ;  not necessary (i dont think)
004CEC05   .  E8 26420500   CALL <haloded.BuildPacket>
004CEC0A   .  8B0D 1CB96900 MOV ECX,DWORD PTR DS:[69B91C]
004CEC10   .  8BE8          MOV EBP,EAX
004CEC12   .  8B4424 2C     MOV EAX,DWORD PTR SS:[ESP+2C]
004CEC16   .  83C4 1C       ADD ESP,1C
004CEC19   .  2BC7          SUB EAX,EDI
004CEC1B   .  8BD9          MOV EBX,ECX
004CEC1D   .  0F84 45010000 JE haloded.004CED68
004CEC23   .  48            DEC EAX                                  ;  Switch (cases 1..2)
004CEC24   .  56            PUSH ESI
004CEC25   .  0F84 B6000000 JE haloded.004CECE1
004CEC2B   .  48            DEC EAX
004CEC2C   .  0F85 A4000000 JNZ haloded.004CECD6
004CEC32   .  0FB64C24 18   MOVZX ECX,BYTE PTR SS:[ESP+18]           ;  Case 2 of switch 004CEC23
004CEC37   .  E8 74060000   CALL haloded.004CF2B0
004CEC3C   .  83F8 FF       CMP EAX,-1
004CEC3F   .  894424 10     MOV DWORD PTR SS:[ESP+10],EAX
004CEC43   .  0F84 8D000000 JE haloded.004CECD6                      ;  make sure the sender is actually in a vehicle
004CEC49   .  A1 E4EC7500   MOV EAX,DWORD PTR DS:[75ECE4]            ;  "players"
004CEC4E   .  894424 20     MOV DWORD PTR SS:[ESP+20],EAX
004CEC52   .  66:897C24 24  MOV WORD PTR SS:[ESP+24],DI
004CEC57   .  35 72657469   XOR EAX,69746572
004CEC5C   .  8D7C24 20     LEA EDI,DWORD PTR SS:[ESP+20]
004CEC60   .  C74424 28 FFF>MOV DWORD PTR SS:[ESP+28],-1
004CEC68   .  894424 2C     MOV DWORD PTR SS:[ESP+2C],EAX
004CEC6C   .  E8 8FDD0200   CALL haloded.004FCA00
004CEC71   .  8BF0          MOV ESI,EAX
004CEC73   .  85F6          TEST ESI,ESI
004CEC75   .  74 5F         JE SHORT haloded.004CECD6
004CEC77   .  EB 07         JMP SHORT haloded.004CEC80
004CEC79   .  8DA424 000000>LEA ESP,DWORD PTR SS:[ESP]
004CEC80   >  8B4E 34       MOV ECX,DWORD PTR DS:[ESI+34]            ;  esi points to the start of the player memory
004CEC83   .  6A 03         PUSH 3
004CEC85   .  E8 86F40500   CALL <haloded.LookupObject>
004CEC8A   .  83C4 04       ADD ESP,4
004CEC8D   .  85C0          TEST EAX,EAX
004CEC8F   .  74 36         JE SHORT haloded.004CECC7
004CEC91   .  8BB8 1C010000 MOV EDI,DWORD PTR DS:[EAX+11C]           ;  object + 11c
004CEC97   .  8B5424 10     MOV EDX,DWORD PTR SS:[ESP+10]
004CEC9B   .  3BFA          CMP EDI,EDX
004CEC9D   .  0F94C0        SETE AL
004CECA0   .  84C0          TEST AL,AL
004CECA2   .  74 23         JE SHORT haloded.004CECC7                ;  jmp if not in vehicle
004CECA4   .  0FBE46 64     MOVSX EAX,BYTE PTR DS:[ESI+64]
004CECA8   .  83F8 FF       CMP EAX,-1
004CECAB   .  74 1A         JE SHORT haloded.004CECC7
004CECAD   .  6A 03         PUSH 3
004CECAF   .  6A 01         PUSH 1
004CECB1   .  6A 00         PUSH 0
004CECB3   .  6A 01         PUSH 1
004CECB5   .  55            PUSH EBP
004CECB6   .  68 40667500   PUSH haloded.00756640                    ;  packet
004CECBB   .  6A 01         PUSH 1
004CECBD   .  8BF3          MOV ESI,EBX
004CECBF   .  E8 9C770400   CALL <haloded.AddToSelectivePacketQueue>
004CECC4   .  83C4 1C       ADD ESP,1C
004CECC7   >  8D7C24 20     LEA EDI,DWORD PTR SS:[ESP+20]
004CECCB   .  E8 30DD0200   CALL haloded.004FCA00
004CECD0   .  8BF0          MOV ESI,EAX
004CECD2   .  85F6          TEST ESI,ESI
004CECD4   .^ 75 AA         JNZ SHORT haloded.004CEC80
004CECD6   >  5E            POP ESI                                  ;  Default case of switch 004CEC23
004CECD7   .  5D            POP EBP
004CECD8   .  5B            POP EBX
004CECD9   >  5F            POP EDI
004CECDA   .  81C4 24020000 ADD ESP,224
004CECE0   .  C3            RETN