def METHOD_NAME(img):
    ret = []
    num_addr_re1 = re.compile(
        rb"""
        \x6A(?P<num>.)      # 6A 08                push    8
        \x59                # 59                   pop     ecx
        \xBE(?P<addr>.{4})  # BE D0 88 41 00       mov     esi, offset encrypted_data1
        \x8D\xBD.{4}        # 8D BD 68 FE FF FF    lea     edi, [ebp+encrypted_data_list]
        \xF3\xA5            # F3 A5                rep movsd
        \x6A.               # 6A 43                push    43h ; 'C'
        \x5B                # 5B                   pop     ebx
        \x53                # 53                   push    ebx
        \x8D\x85.{4}        # 8D 85 89 FE FF FF    lea     eax, [ebp+var_177]
        \xA4                # A4                   movsb
        \x6A\x00            # 6A 00                push    0
        \x50                # 50                   push    eax
        \xE8.{4}            # E8 78 E9 FE FF       call    about_memset
        """,
        re.DOTALL | re.VERBOSE,
    )
    num_addr_re2 = re.compile(
        rb"""
        \x6A(?P<num>.)      # 6A 08                push    8
        \x59                # 59                   pop     ecx
        \xBE(?P<addr>.{4})  # BE F4 88 41 00       mov     esi, offset encrypted_data2
        \x8D.{2,5}          # 8D BD CC FE FF FF    lea     edi, [ebp+var_134]
        \xF3\xA5            # F3 A5                rep movsd
        \x53                # 53                   push    ebx
        \x8D.{2,5}          # 8D 85 ED FE FF FF    lea     eax, [ebp+var_113]
        \x6A\x00            # 6A 00                push    0
        \x50                # 50                   push    eax
        \xA4                # A4                   movsb
        \xE8.{4}            # E8 58 E9 FE FF       call    about_memset
        """,
        re.DOTALL | re.VERBOSE,
    )
    num_addr_list = re.findall(num_addr_re1, img)
    num_addr_list.extend(re.findall(num_addr_re2, img))
    for num, addr in num_addr_list:
        dlen = ord(num) * 4
        (addr,) = struct.unpack_from("<I", addr)
        # print(hex(addr))
        addr -= 0x400000
        data = img[addr : addr + dlen]
        ret.append(data)
    return ret