import re,struct,sys
d = open('/Users/jing/Documents/yutong/yutongapp/TP5(En).exe','rb').read()
BASE=0x400000
def find_call_indirect(iat_va):
    # ff 15 <iat_va>
    pat = b'\xff\x15' + struct.pack('<I', iat_va)
    return [m.start() for m in re.finditer(re.escape(pat), d)]
for name,va in [('rand',0x4465a4),('srand',0x4465a8),('time',0x4465ac),('_ftol',0x446590),('CreateFileA',0x4460d0)]:
    h = find_call_indirect(va)
    print(name, [hex(x+BASE) for x in h])