import re
d = open('/Users/jing/Documents/yutong/yutongapp/TP5(En).exe','rb').read()
def hits(pat, lo=0x1000, hi=0x46000):
    return [m.start() for m in re.finditer(re.escape(pat), d[lo:hi])]
for name,pat in [('0x11684', b'\x84\x16\x01\x00'), ('0x11684 push', b'\x68\x84\x16\x01\x00')]:
    h = hits(pat)
    print(name, [hex(x+0x1000) for x in h])
print('--- MSVCRT imports ---')
import pefile
p = pefile.PE('/Users/jing/Documents/yutong/yutongapp/TP5(En).exe')
for e in p.DIRECTORY_ENTRY_IMPORT:
    if b'MSVCRT' in e.dll.upper() or b'KERNEL32' in e.dll.upper():
        for imp in e.imports:
            print(e.dll.decode(), '%08x' % imp.address, imp.name.decode() if imp.name else imp.ordinal)