Function at 0x631fcd8e
Capabilities:
Contain obfuscated stackstrings
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3838
call fcn.6337fa50
sub esp, eax
mov eax, dword [0x6757c7ec]
test eax, eax
je 0x631fd019
mov eax, dword [0x6757d400]
test eax, eax
je 0x631fd019
call fcn.631fa762
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call sub.msvcr100.dll_strlen
cmp eax, 8
ja 0x631fcde8
mov dword [esp + 4], str.Installer_failed_because_of_invalid_HMODULE_path._Manual_installation_is_required_n
mov dword [esp], 1
call fcn.63181eb4
jmp 0x631fd01a
call fcn.631fbd72
test eax, eax
je 0x631fce23
mov dword [ebp - 0xc], str.runas
mov dword [esp + 0xc], 0x30
mov dword [esp + 8], str.Call_of_Duty_4_X___Preinstaller
mov dword [esp + 4], str.Note:_Installation_of_the_Call_of_Duty_4_X_update_will_require_extended_permissions
mov dword [esp], 0
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
call eax
sub esp, 0x10
jmp 0x631fce2a
mov dword [ebp - 0xc], str.open
lea eax, [ebp - 0x2014]
mov dword [esp + 8], eax
mov dword [esp + 4], 7
mov dword [esp], str.ni_Zml
call fcn.631b4d81
call fcn.631b74e5
mov edx, eax
mov dword [esp + 0x10], 0
lea eax, [ebp - 0x814]
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.cod4xupd.exe
lea eax, [ebp - 0x2014]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.631b5059
mov dword [esp + 8], 0x400
mov eax, dword [ebp - 0x10]
mov dword [esp + 4], eax
lea eax, [ebp - 0x1414]
mov dword [esp], eax
call fcn.631e0550
mov dword [esp + 4], 0x5c
lea eax, [ebp - 0x1414]
mov dword [esp], eax
call sub.msvcr100.dll_strrchr
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x631fcf4f
mov eax, dword [ebp - 0x14]
mov byte [eax], 0
mov dword [esp + 8], 0x800
lea eax, [ebp - 0x1414]
mov dword [esp + 4], eax
lea eax, [ebp - 0x1c14]
mov dword [esp], eax
call fcn.631e0e6f
lea eax, [ebp - 0x1c14]
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.set_installdir___s_
mov dword [esp + 4], 0x800
lea eax, [ebp - 0x1014]
mov dword [esp], eax
call fcn.631e0e0a
mov dword [esp + 0x14], 9
mov dword [esp + 0x10], 0
lea eax, [ebp - 0x1014]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x814]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0xc]
mov dword [esp + 4], eax
mov dword [esp], 0
mov eax, dword [sym.imp.SHELL32.dll_ShellExecuteW]
call eax
sub esp, 0x18
test eax, eax
jne 0x631fd01a
jmp 0x631fcf68
mov dword [esp + 4], str.Installer_failed_because_of_invalid_HMODULE_path._Manual_installation_is_required_n
mov dword [esp], 1
call fcn.63181eb4
jmp 0x631fd01a
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov edx, eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x400
lea eax, [ebp - 0x2814]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x400
mov dword [esp + 8], edx
mov dword [esp + 4], 0
mov dword [esp], 0x1200
mov eax, dword [sym.imp.KERNEL32.dll_FormatMessageW]
call eax
sub esp, 0x1c
lea eax, [ebp - 0x2814]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1014]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x814]
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.ShellExec_of_commandline:__s__s_has_failed._nError:__s_n
mov dword [esp + 4], 0x1000
lea eax, [ebp - 0x3814]
mov dword [esp], eax
call fcn.631e0e0a
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], str.Call_of_Duty_X_Preinstaller___Error
lea eax, [ebp - 0x3814]
mov dword [esp + 4], eax
mov dword [esp], 0
mov eax, dword [sym.imp.USER32.dll_MessageBoxW]
call eax
sub esp, 0x10
jmp 0x631fd01a
nop
leave
ret