I am dealing with a heavily obfuscated binary, with certain portions of it having an abundance of junk code when it attempts to set a value at certain offsets to esp/ebp. My question, having identified the junk code from the actual code, is how can I remove the junk opcodes entirely and shorten the disassembly to the direct operation that it is employing? I have found no delete/remove bytes in the SDK, and short of a processor module, I am not sure if IDA has this capability, which would be a shame if it didn't.
add ecx, 4 mov edi, 32F88Eh ; junk and edi, 34h ; junk add edi, 0aB0b2cE6h ; junk mov ebx, 98761234h ; junk mov [ebp+edi+47652784], ecx; [ebp+0xa0]
The manipulations to
edi are junk in the sense their value is actually static once you apply constant folding to it
add ecx, 4 mov [ebp+0xa0], ecx