Function at 0x444440
Capabilities:
Accept command line arguments
Query environment variable
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x1a4
mov eax, dword [0x4de57c]
xor eax, esp
mov dword [esp + 0x1a0], eax
push ebx
push esi
mov esi, dword [esp + 0x1b0]
push edi
push str.Process_Info:_n
push esi
mov edi, ecx
call fcn.00490a6e
push str.______________n
push esi
call fcn.00490a6e
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push str.ProcessId:__x_n
push esi
call fcn.00490a6e
add esp, 0xc
push 0x104
lea eax, [esp + 0xac]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea ecx, [esp + 0xa8]
push ecx
push str.FilePath:__s_n
push esi
call fcn.00490a6e
mov edx, dword [edi]
add esp, 0xc
push edx
call dword [sym.imp.KERNEL32.dll_GetPriorityClass]
xor ecx, ecx
cmp dword [ecx*8 + 0x4c1d94], eax
je 0x4444d7
add ecx, 1
cmp ecx, 6
jl 0x4444c4
jmp 0x4444ed
mov eax, dword [ecx*8 + 0x4c1d98]
push eax
push str.PriorityClass:__s_n
push esi
call fcn.00490a6e
add esp, 0xc
lea ecx, [esp + 0x78]
push ecx
lea edx, [esp + 0x94]
push edx
mov edx, dword [edi]
lea eax, [esp + 0xa8]
push eax
lea ecx, [esp + 0xa4]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_GetProcessTimes]
test eax, eax
je 0x444645
push str.ProcessTimes_n
push esi
call fcn.00490a6e
add esp, 8
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x9c]
push ecx
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov ebx, dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
lea edx, [esp + 0x10]
push edx
lea eax, [esp + 0x84]
push eax
call ebx
lea ecx, [esp + 0x88]
push ecx
lea edx, [esp + 0x14]
push edx
call fcn.004438c0
add esp, 8
test eax, eax
je 0x4445b2
fld qword [esp + 0x88]
lea eax, [esp + 0xc]
push eax
push 0
push 0x400
sub esp, 8
fstp qword [esp]
mov dword [esp + 0x20], 0
call dword [sym.imp.OLEAUT32.dll_VarBstrFromDisp]
mov ecx, dword [esp + 0xc]
push ecx
push str.__CreationTime:__S_n
push esi
call fcn.00490a6e
mov edx, dword [esp + 0x18]
add esp, 0xc
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x94]
push ecx
call ebx
push str.__KernelTime:
push esi
call fcn.00490a6e
movzx edx, word [esp + 0x26]
movzx eax, word [esp + 0x24]
movzx ecx, word [esp + 0x22]
push edx
movzx edx, word [esp + 0x24]
push eax
push ecx
push edx
push str._02d:_02d:_02d._02d
push esi
call fcn.00490a6e
push 0x4c17c0
push esi
call fcn.00490a6e
add esp, 0x28
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x7c]
push ecx
call ebx
push str.__UserTime:
push esi
call fcn.00490a6e
movzx edx, word [esp + 0x26]
movzx eax, word [esp + 0x24]
movzx ecx, word [esp + 0x22]
push edx
movzx edx, word [esp + 0x24]
push eax
push ecx
push edx
push str._02d:_02d:_02d._02d
push esi
call fcn.00490a6e
push 0x4c17c0
push esi
call fcn.00490a6e
add esp, 0x28
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push eax
push str.CommandLine:__s_n
push esi
call fcn.00490a6e
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov ebx, eax
test ebx, ebx
je 0x44467c
push ebx
push str.EnvironmentStrings:__S_n
push esi
call fcn.00490a6e
add esp, 0xc
push ebx
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
mov ecx, dword [edi]
lea eax, [esp + 0x48]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
test eax, eax
je 0x444739
push str.IoCounters_n
push esi
call fcn.00490a6e
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x50]
push edx
push eax
push str.__ReadOperationCount:__I64u_n
push esi
call fcn.00490a6e
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x68]
push ecx
push edx
push str.__WriteOperationCount:__I64u_n
push esi
call fcn.00490a6e
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x80]
push eax
push ecx
push str.__OtherOperationCount:__I64u_n
push esi
call fcn.00490a6e
mov edx, dword [esp + 0x9c]
mov eax, dword [esp + 0x98]
push edx
push eax
push str.__ReadTransferCount:__I64u_n
push esi
call fcn.00490a6e
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0xb0]
add esp, 0x48
push ecx
push edx
push str.__WriteTransferCount:__I64u_n
push esi
call fcn.00490a6e
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x80]
push eax
push ecx
push str.__OtherTransferCount:__I64u_n
push esi
call fcn.00490a6e
add esp, 0x20
xor eax, eax
push 0x28
lea edx, [esp + 0x24]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov eax, dword [edi]
push edx
push eax
mov dword [esp + 0x2c], 0x28
call sub.PSAPI.DLL_GetProcessMemoryInfo
test eax, eax
je 0x44481f
push str.MemCounters_n
push esi
call fcn.00490a6e
mov ecx, dword [esp + 0x2c]
push ecx
push str.__PageFaultCount:__u_n
push esi
call fcn.00490a6e
mov edx, dword [esp + 0x3c]
push edx
push str.__PeakWorkingSetSize:__u_n
push esi
call fcn.00490a6e
mov eax, dword [esp + 0x4c]
push eax
push str.__WorkingSetSize:__u_n
push esi
call fcn.00490a6e
mov ecx, dword [esp + 0x5c]
push ecx
push str.__QuotaPeakPagedPoolUsage:__u_n
push esi
call fcn.00490a6e
mov edx, dword [esp + 0x6c]
push edx
push str.__QuotaPagedPoolUsage:__u_n
push esi
call fcn.00490a6e
mov eax, dword [esp + 0x7c]
add esp, 0x44
push eax
push str.__QuotaPeakNonPagedPoolUsage:__u_n
push esi
call fcn.00490a6e
mov ecx, dword [esp + 0x48]
push ecx
push str.__QuotaNonPagedPoolUsage:__u_n
push esi
call fcn.00490a6e
mov edx, dword [esp + 0x58]
push edx
push str.__PagefileUsage:__u_n
push esi
call fcn.00490a6e
mov eax, dword [esp + 0x68]
push eax
push str.__PeakPagefileUsage:__u_n
push esi
call fcn.00490a6e
add esp, 0x30
push str.GuiResources_n
push esi
call fcn.00490a6e
mov ecx, dword [edi]
mov ebx, dword [sym.imp.USER32.dll_GetGuiResources]
add esp, 8
push 0
push ecx
call ebx
push eax
push str.GdiObjects:__u_n
push esi
call fcn.00490a6e
mov edx, dword [edi]
add esp, 0xc
push 1
push edx
call ebx
push eax
push str.UserObjects:__u_n
push esi
call fcn.00490a6e
mov eax, dword [edi + 4]
add esp, 0xc
push eax
call dword [sym.imp.KERNEL32.dll_GetProcessVersion]
push eax
push str.ProcessVersion:__x_n
push esi
call fcn.00490a6e
push 0x4c17c0
push esi
call fcn.00490a6e
mov ecx, dword [esp + 0x1c0]
add esp, 0x14
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0048de34
add esp, 0x1a4
ret 4