Function at 0x425b8d
Capabilities:
Create process on windows
Create process suspended
Inject apc
Query environment variable
Resume thread
Self delete
Terminate process
Use process replacement

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x33c
mov eax, dword [0x51a0a0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, 0x104
lea eax, [ebp - 0x210]
push edi
push eax
xor ebx, ebx
mov esi, ecx
push str._SystemRoot_System32_rundll32.exe
mov dword [ebp - 0x214], ebx
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
test eax, eax
je 0x425da9
cmp eax, edi
jae 0x425da9
push 0x40
lea eax, [ebp - 0x27c]
mov dword [ebp - 0x280], 0x44
push ebx
push eax
call fcn.004cda10
add esp, 0xc
lea eax, [ebp - 0x224]
xorps xmm0, xmm0
movups xmmword [ebp - 0x224], xmm0
push eax
lea eax, [ebp - 0x280]
push eax
push ebx
push ebx
push 4
push ebx
push ebx
push ebx
lea eax, [ebp - 0x210]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov edi, eax
test edi, edi
je 0x425da4
mov ecx, dword [esi + 0x10]
push 4
push 0x1000
lea ecx, [ecx*2 + 2]
push ecx
push ebx
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov dword [ebp - 0x234], ecx
test ecx, ecx
je 0x425d2a
cmp dword [esi + 0x14], 8
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x228], ebx
jb 0x425c68
mov esi, dword [esi]
lea edx, [ebp - 0x228]
push edx
lea eax, [eax*2 + 2]
push eax
push esi
push ecx
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov esi, eax
push 0x5000ac
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x5000b4
push esi
mov dword [ebp - 0x22c], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x5000c0
push esi
mov dword [ebp - 0x230], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x22c]
mov dword [ebp - 0x214], eax
test ecx, ecx
je 0x425d26
mov esi, dword [ebp - 0x230]
test esi, esi
je 0x425d26
test eax, eax
je 0x425d26
push 0x2710
push dword [ebp - 0x220]
push ecx
call dword [sym.imp.KERNEL32.dll_QueueUserAPC]
push dword [ebp - 0x234]
push dword [ebp - 0x220]
push esi
call dword [sym.imp.KERNEL32.dll_QueueUserAPC]
push ebx
push dword [ebp - 0x220]
push dword [ebp - 0x214]
call dword [sym.imp.KERNEL32.dll_QueueUserAPC]
push dword [ebp - 0x220]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
jmp 0x425d8a
mov edi, ebx
jmp 0x425d8a
push 2
pop ecx
call fcn.0044bc30
test al, al
je 0x425d6c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 2
push 0x1b0
push str..._.._chrome_installer_setup_setup_util.cc
lea ecx, [ebp - 0x330]
mov dword [ebp - 0x338], eax
call fcn.0044bca0
mov edx, 0x5000cc
lea ecx, [ebp - 0x328]
call fcn.0041cec3
xor ebx, ebx
inc ebx
test bl, 1
je 0x425d7c
lea ecx, [ebp - 0x338]
call fcn.0044c710
push 0xffffffffffffffff
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push dword [ebp - 0x220]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
setne al
jmp 0x425dab
xor al, al
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004cb8a3
mov esp, ebp
pop ebp
ret