CPU Disasm
Address   Hex dump          Command                                  Comments
7564AE99  |.  8BFF          MOV EDI,EDI                              ; BOOL user32.UserClientDllInitialize(guessed hDLLInstance,CallReason,pReserved)
7564AE9B  |.  55            PUSH EBP
7564AE9C  |.  8BEC          MOV EBP,ESP
7564AE9E  |.  837D 0C 01    CMP DWORD PTR SS:[ARG.2],1
7564AEA2  |.  75 0D         JNE SHORT 7564AEB1
7564AEA4  |.  FF75 10       PUSH DWORD PTR SS:[ARG.3]                ; /Arg3 => [ARG.3]
7564AEA7  |.  6A 01         PUSH 1                                   ; |Arg2 = 1
7564AEA9  |.  FF75 08       PUSH DWORD PTR SS:[ARG.1]                ; |Arg1 => [ARG.1]
7564AEAC  |.  E8 B2130000   CALL 7564C263                            ; \user32.7564C263
7564AEB1  |>  5D            POP EBP