I had a similar idea, but I was going to have the new EXE contain the KIX32.exe as well. This would make the encrypted script completely stand alone.

How hard would it be to add that to what you have already done?

cj