Function at 0x415650
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag

Disassembly:
push 0xffffffffffffffff
push 0x448818
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
mov eax, dword [0x48b448]
push ebx
push esi
push edi
mov esi, ecx
mov dword [esp + 0xc], eax
xor ebx, ebx
lea ecx, [esp + 0x10]
push ebx
push ebx
push str.MenuFont
push str.NPinyinMenu
push ecx
mov ecx, 0x48f560
mov dword [esp + 0x30], ebx
call fcn.00401980
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x20], 1
call fcn.0043bcdc
lea ecx, [esp + 0x10]
mov byte [esp + 0x1c], bl
call fcn.0043bba3
push ebx
push str.MenuFontSize
push str.NPinyinMenu
mov ecx, 0x48f560
call fcn.00401ab0
mov edx, dword [esp + 0xc]
mov edi, dword [sym.imp.GDI32.dll_CreateFontA]
push edx
push 0x30
push ebx
push ebx
push ebx
push 1
push ebx
push ebx
push ebx
push 0x1f4
push ebx
push ebx
push ebx
push eax
call edi
push eax
lea ecx, [esi + 0x48]
call fcn.004416cd
push ebx
push ebx
push str.MenuFontKorea
lea eax, [esp + 0x1c]
push str.NPinyinMenu
push eax
mov ecx, 0x48f560
call fcn.00401980
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x20], 2
call fcn.0043bcdc
lea ecx, [esp + 0x10]
mov byte [esp + 0x1c], bl
call fcn.0043bba3
push ebx
push str.MenuFontKoreaSize
push str.NPinyinMenu
mov ecx, 0x48f560
call fcn.00401ab0
mov ecx, dword [esp + 0xc]
push ecx
push 0x30
push ebx
push ebx
push ebx
push 1
push ebx
push ebx
push ebx
push 0x1f4
push ebx
push ebx
push ebx
push eax
call edi
push eax
lea ecx, [esi + 0x50]
call fcn.004416cd
push ebx
push ebx
push str.PageFont
lea edx, [esp + 0x1c]
push str.NPinyinMenu
push edx
mov ecx, 0x48f560
call fcn.00401980
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x20], 3
call fcn.0043bcdc
lea ecx, [esp + 0x10]
mov byte [esp + 0x1c], bl
call fcn.0043bba3
push ebx
push str.PageFontSize
push str.NPinyinMenu
mov ecx, 0x48f560
call fcn.00401ab0
mov ecx, dword [esp + 0xc]
push ecx
push 0x30
push ebx
push ebx
push ebx
push 1
push ebx
push ebx
push ebx
push 0x1f4
push ebx
push ebx
push ebx
push eax
call edi
push eax
lea ecx, [esi + 0x58]
call fcn.004416cd
push ebx
push ebx
push str.pyFont
lea edx, [esp + 0x1c]
push str.NPinyinMenu
push edx
mov ecx, 0x48f560
call fcn.00401980
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x20], 4
call fcn.0043bcdc
lea ecx, [esp + 0x10]
mov byte [esp + 0x1c], bl
call fcn.0043bba3
push ebx
push str.pyFontSize
push str.NPinyinMenu
mov ecx, 0x48f560
call fcn.00401ab0
mov ecx, dword [esp + 0xc]
push ecx
push 0x30
push ebx
push ebx
push ebx
push 1
push ebx
push ebx
push ebx
push 0x384
push ebx
push ebx
push ebx
push eax
call edi
push eax
lea ecx, [esi + 0xb0]
call fcn.004416cd
push ebx
push str.MenuColor
push str.NPinyinMenu
mov ecx, 0x48f560
call fcn.00401ab0
push 1
push str.MenuColor
push str.NPinyinMenu
mov ecx, 0x48f560
mov edi, eax
call fcn.00401ab0
push 2
push str.MenuColor
push str.NPinyinMenu
mov ecx, 0x48f560
mov dword [esp + 0x1c], eax
call fcn.00401ab0
xor edx, edx
and edi, 0xff
mov dh, al
push ebx
mov dl, byte [esp + 0x14]
push str.SelectedColor
shl edx, 8
or edx, edi
push str.NPinyinMenu
mov ecx, 0x48f560
mov dword [esi + 0x60], edx
call fcn.00401ab0
push 1
push str.SelectedColor
push str.NPinyinMenu
mov ecx, 0x48f560
mov edi, eax
call fcn.00401ab0
push 2
push str.SelectedColor
push str.NPinyinMenu
mov ecx, 0x48f560
mov dword [esp + 0x1c], eax
call fcn.00401ab0
xor ecx, ecx
and edi, 0xff
mov ch, al
push ebx
mov cl, byte [esp + 0x14]
push str.PageFontColor
shl ecx, 8
or ecx, edi
push str.NPinyinMenu
mov dword [esi + 0x64], ecx
mov ecx, 0x48f560
call fcn.00401ab0
push 1
push str.PageFontColor
push str.NPinyinMenu
mov ecx, 0x48f560
mov edi, eax
call fcn.00401ab0
push 2
push str.PageFontColor
push str.NPinyinMenu
mov ecx, 0x48f560
mov dword [esp + 0x1c], eax
call fcn.00401ab0
xor edx, edx
and edi, 0xff
mov dh, al
push ebx
mov dl, byte [esp + 0x14]
shl edx, 8
or edx, edi
mov dword [esi + 0x68], edx
push str.pyFontColor
push str.NPinyinMenu
mov ecx, 0x48f560
call fcn.00401ab0
push 1
push str.pyFontColor
push str.NPinyinMenu
mov ecx, 0x48f560
mov edi, eax
call fcn.00401ab0
push 2
push str.pyFontColor
push str.NPinyinMenu
mov ecx, 0x48f560
mov dword [esp + 0x1c], eax
call fcn.00401ab0
xor ecx, ecx
and edi, 0xff
mov ch, al
push 0x48f63c
mov cl, byte [esp + 0x14]
push ebx
shl ecx, 8
or ecx, edi
push str.CurPageName
lea edx, [esp + 0x1c]
mov dword [esi + 0xb8], ecx
push str.NPinyinMenu
push edx
mov ecx, 0x48f560
call fcn.00401980
push eax
lea ecx, [esi + 0x6c]
mov byte [esp + 0x20], 5
call fcn.0043bcdc
lea ecx, [esp + 0x10]
mov byte [esp + 0x1c], bl
call fcn.0043bba3
push 0x48f63c
push 1
push str.CurPageName
lea eax, [esp + 0x1c]
push str.NPinyinMenu
push eax
mov ecx, 0x48f560
call fcn.00401980
push eax
lea ecx, [esi + 0x70]
mov byte [esp + 0x20], 6
call fcn.0043bcdc
lea ecx, [esp + 0x10]
mov byte [esp + 0x1c], bl
call fcn.0043bba3
push 0x48f63c
push ebx
push str.TotalPageName
lea ecx, [esp + 0x1c]
push str.NPinyinMenu
push ecx
mov ecx, 0x48f560
call fcn.00401980
push eax
lea ecx, [esi + 0x74]
mov byte [esp + 0x20], 7
call fcn.0043bcdc
lea ecx, [esp + 0x10]
mov byte [esp + 0x1c], bl
call fcn.0043bba3
push 0x48f63c
push 1
push str.TotalPageName
lea edx, [esp + 0x1c]
push str.NPinyinMenu
push edx
mov ecx, 0x48f560
call fcn.00401980
mov byte [esp + 0x1c], 8
push eax
lea ecx, [esi + 0x78]
call fcn.0043bcdc
lea ecx, [esp + 0x10]
mov byte [esp + 0x1c], bl
call fcn.0043bba3
push ebx
push str.SongListRect
push str.NPinyinMenu
mov ecx, 0x48f560
call fcn.00401ab0
push 1
push str.SongListRect
push str.NPinyinMenu
mov ecx, 0x48f560
mov dword [esi + 0x28], eax
call fcn.00401ab0
push 2
push str.SongListRect
push str.NPinyinMenu
mov ecx, 0x48f560
mov dword [esi + 0x2c], eax
call fcn.00401ab0
push 3
push str.SongListRect
push str.NPinyinMenu
mov ecx, 0x48f560
mov dword [esi + 0x30], eax
call fcn.00401ab0
push ebx
push str.PageRect
push str.NPinyinMenu
mov ecx, 0x48f560
mov dword [esi + 0x34], eax
call fcn.00401ab0
push 1
push str.PageRect
push str.NPinyinMenu
mov ecx, 0x48f560
mov dword [esi + 0x38], eax
call fcn.00401ab0
push 2
push str.PageRect
push str.NPinyinMenu
mov ecx, 0x48f560
mov dword [esi + 0x3c], eax
call fcn.00401ab0
push 3
push str.PageRect
push str.NPinyinMenu
mov ecx, 0x48f560
mov dword [esi + 0x40], eax
call fcn.00401ab0
push ebx
push str.InputBoxRect
push str.NPinyinMenu
mov ecx, 0x48f560
mov dword [esi + 0x44], eax
call fcn.00401ab0
push 1
push str.InputBoxRect
push str.NPinyinMenu
mov ecx, 0x48f560
mov dword [esi + 0x90], eax
call fcn.00401ab0
push 2
push str.InputBoxRect
push str.NPinyinMenu
mov ecx, 0x48f560
mov dword [esi + 0x94], eax
call fcn.00401ab0
push 3
push str.InputBoxRect
push str.NPinyinMenu
mov ecx, 0x48f560
mov dword [esi + 0x98], eax
call fcn.00401ab0
push ebx
push str.pyBoxRect
mov dword [esi + 0x9c], eax
push str.NPinyinMenu
mov ecx, 0x48f560
call fcn.00401ab0
push 1
push str.pyBoxRect
push str.NPinyinMenu
mov ecx, 0x48f560
mov dword [esi + 0xa0], eax
call fcn.00401ab0
push 2
push str.pyBoxRect
push str.NPinyinMenu
mov ecx, 0x48f560
mov dword [esi + 0xa4], eax
call fcn.00401ab0
push 3
push str.pyBoxRect
push str.NPinyinMenu
mov ecx, 0x48f560
mov dword [esi + 0xa8], eax
call fcn.00401ab0
push ebx
push str.SongNameBarX
push str.NPinyinMenu
mov ecx, 0x48f560
mov dword [esi + 0xac], eax
call fcn.00401ab0
push 1
push str.SongNameBarX
push str.NPinyinMenu
mov ecx, 0x48f560
mov dword [esi + 0x20], eax
call fcn.00401ab0
push ebx
push str.MenuItems
push str.NPinyinMenu
mov ecx, 0x48f560
mov dword [esi + 0x24], eax
call fcn.00401ab0
push ebx
push str.SumNumber
push str.NPinyinMenu
mov ecx, 0x48f560
mov dword [esi + 0x18], eax
call fcn.00401ab0
lea ecx, [esp + 0xc]
mov dword [esi + 0x1c], eax
mov dword [esp + 0x1c], 0xffffffff
call fcn.0043bba3
mov ecx, dword [esp + 0x14]
pop edi
pop esi
mov eax, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x14
ret