Function at 0x1013b0d0
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Spawn thread to rwx shellcode

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
push ebx
push esi
push edi
push str.___Uninstalling_n
mov ebx, ecx
call fcn.100b9760
mov ecx, dword [0x1063c3a8]
add esp, 4
xor edx, edx
mov eax, dword [ecx]
push dword [0x1063c5b8]
push dword [eax + 0x2c]
lea eax, [esp + 0x1c]
push eax
call fcn.1002a9f0
push 0
push 0
push 0xa
mov edx, dword [eax]
mov ecx, eax
push 8
push str.panorama_layout_mainmenu.xml
push str.azurreUnhook___
push dword [0x1064740c]
call dword [edx + 0x1c4]
call fcn.100fdf80
mov ecx, dword [0x1063c368]
xor edx, edx
push str.cl_fullupdate
push dword [0x1063c5b8]
mov eax, dword [ecx]
push dword [eax + 0x3c]
lea eax, [esp + 0x20]
push eax
call fcn.1002a9f0
mov eax, dword [eax + 0x18]
call eax
mov cl, 1
mov byte [0x106474e3], 1
call fcn.10124c30
mov cl, 1
call fcn.100d1c00
mov cl, 1
call fcn.10076190
xor ecx, ecx
call fcn.1002be60
mov ecx, dword [0x1064072c]
test ecx, ecx
je 0x1013b275
mov dword [ecx + 8], 0
mov ecx, 0x106406f4
mov eax, dword [0x1064072c]
vpxor xmm0, xmm0, xmm0
mov dword [eax + 0xc], 0
xor al, al
vmovdqu xmmword [0x106406fc], xmm0
vmovq qword [0x1064070c], xmm0
mov dword [0x1063c6f0], 0
xchg byte [ecx], al
mov ecx, dword [0x1063c6e8]
test ecx, ecx
je 0x1013b20c
call fcn.1002ab60
mov esi, dword [0x1063c6e8]
test esi, esi
je 0x1013b202
mov ecx, esi
call fcn.1002ab60
cmp dword [esi + 0x60], 0
jne 0x1013b445
lea eax, [esi + 0x34]
push eax
call fcn.10024520
add esp, 4
push 0x64
push esi
call fcn.1017d3f8
add esp, 8
mov dword [0x1063c6e8], 0
mov edi, dword [0x1064072c]
mov esi, dword [edi + 0xc]
test esi, esi
je 0x1013b22e
mov eax, dword [edi + 4]
cmp eax, 3
je 0x1013b226
cmp eax, 1
jne 0x1013b22e
mov ecx, dword [edi + 0x50]
lea edx, [edi + 0x54]
call esi
mov esi, dword [edi]
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 4], 0xffffffff
mov byte [esi], 0
mov dword [edi + 4], 0
mov edi, dword [0x1064072c]
mov esi, dword [edi]
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 4], 0xffffffff
mov byte [esi], 0
mov dword [edi], 0
mov dword [0x1064072c], 0
call fcn.10110820
cmp dword [0x106474f4], 0
je 0x1013b28a
xor ecx, ecx
call fcn.10110760
xor eax, eax
mov esi, 0x106474f8
xchg dword [esi], eax
call fcn.10110820
cmp dword [0x106474f4], 0
je 0x1013b32f
xor ecx, ecx
call fcn.10110760
test eax, eax
jne 0x1013b32f
mov eax, dword [0x1075abcc]
mov dword [0x1075abcc], 0
test eax, eax
je 0x1013b2e7
mov edi, dword [sym.imp.KERNEL32.dll_VirtualFree]
nop dword [eax]
mov esi, dword [eax]
push 0x8000
push 0
push eax
call edi
mov eax, esi
test esi, esi
jne 0x1013b2d0
mov esi, 0x106474f8
push dword [0x1075abc0]
push 0
push dword [0x106474f4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
push dword [0x106474f4]
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
mov dword [0x106474f4], 0
mov dword [0x1075abc0], 0
mov dword [0x1075abc4], 0
mov dword [0x1075abc8], 0
xor eax, eax
xchg dword [esi], eax
push str.___Restoring_n
call fcn.100b9760
add esp, 4
lea ecx, [ebx + 0x8c]
call fcn.100e1240
lea ecx, [ebx + 0x304]
call fcn.100e1240
push 0x10138bf0
push dword [0x106475c0]
call section..text
mov ecx, dword [0x10647500]
test ecx, ecx
je 0x1013b377
mov eax, dword [0x106474fc]
mov dword [ecx], eax
mov ecx, dword [0x10647508]
test ecx, ecx
je 0x1013b388
mov eax, dword [0x10647504]
mov dword [ecx], eax
mov eax, dword [0x1075a8a0]
cmp eax, dword [0x1075a8a4]
je 0x1013b39a
mov dword [0x1075a8a4], eax
call fcn.100991f0
call fcn.100fdf80
mov ecx, eax
call fcn.100ff1c0
push dword [ebx]
push 0xfffffffffffffffc
push dword [ebx + 0x318]
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov eax, dword [0x1063c3e0]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov ecx, dword [eax]
mov eax, dword [ebx + 4]
mov dword [ecx], eax
mov eax, dword [0x1063c3e4]
mov ecx, dword [eax]
mov eax, dword [ebx + 8]
mov dword [ecx], eax
lea eax, [esp + 0x10]
push eax
push 0x40
push 4
push dword [0x1063c438]
call esi
test eax, eax
je 0x1013b40d
mov ecx, dword [ebx + 0xc]
mov eax, dword [0x1063c438]
sub ecx, eax
push 0
sub ecx, 4
mov dword [eax], ecx
push dword [esp + 0x14]
push 4
push dword [0x1063c438]
call esi
push 0
push 0
push dword [ebx + 0x314]
push 0x1013b080
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
je 0x1013b431
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.___Azurre_Has_Been_Unhooked___Restart_Game_Anyway____n
call fcn.100b9760
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.1002c710
int3