MASM RunPE Shell Code
 

First I don't know if this the Right forum to post My code :D

so

Here's My MASM Shell Code ;)

http://pastebin.com/32Ntt5zG#

and Shell AS Bytes ( Delphi ) :D

http://pastebin.com/tFP1UpqR#

and remember

{
XOR AL,00h ; XOR Key 1 (Byte Number $686 )
XOR AL,00h ; XOR Key 2 (Byte Number $684)
}

{
NewRunPE [$684] := KEY2;
NewRunPE [$686] := KEY1;
}

i hope it helps ;)

Thanks Coldzer0, i'll try it. Is it works also in x64 machine? :)

thanks DaGoN for reply :)

and yes i test it on x64 and x32

and here's some update in shellcode

i add small code to convert module name to UpperCase

cuz in XP module name in lowerCase and in Win8 it's UpperCase

new code : http://pastebin.com/WgMv0ncX