ASPR: stolen bytes neccessary?!

[WhoCares]

coz those bytes you mentioned is just to set up the stack frame and reserve some space for local variables. No need to restore the stack coz this procedure will never return due to ExitProcess/TerminateProcess call.

Originally posted by MaRKuS-DJM
i've unpacked many aps with asprotect now... and now i've a question...

do i really need the stolen bytes? i've written this to the oep, and the apps worked without any stolen bytes...
push ebp
mov ebp, esp
add esp,-010
mov eax,******* <<<< this is only if i've found a eax-value

the apps worked so far... no problems...