your suggestion didn't bring up anything useful
It does. Just look a little bit more careful. It's illegal to download copyrighted ROMs, you know. So certainly you won't find illegal download sites easily. But they *are* there and they *can* be found with Google.
Regarding encrypted ROMs, older versions of WinUAE required that the rom.key file was explicitely mentioned in the config. Current versions just assume the file is in the same directory as the ROM file. So I think that WinFellow (which AFAIK has not been updated for some time) still needs the path to the rom.key file in its config.
IMHO Doobrey's purposal to run Transrom or similar inside WinUAE in order to get an unexcrypted version of the ROM file is worth a try, too.
