This one ends up somewhere in the middle:

sub tux_for {
    my ($length, $ones) = @_;
    [   map  { substr unpack ("b*", $_), 0, $length }
        grep { $ones == unpack "%32b*" => $_ }
        map  { pack "L<", $_ }
        0 .. oct "0b".join""=> (1) x $ones, (0) x ($length - $ones)
        ];
    }
[download]