sd didnt have more exits from the decryptor
if you patched the right parts it always exited on the jmp [ebp-4]
think it was -4 but it was a constant bounce into anti debug (patch to 33 c0 40 c3) -> decrypt -> another check -> goodboy bounced to the jmp [ebp-4] part
seems we all get rusty over time...
