Search:

aah, ok, and how on earth would you be able to find what part of the user.dat file is the password.
So it is xor'd ? Using a random key?

What logon password? The passwords for every user are stored in .pwl files, what password is stored in user.dat then?

If the key is large enough it'll take way too much time to try and crack the cyphered text by hand. But with a short key this is very possible.

Of course it is bad, you can crack it in your head, that says enough.
But it is the basic thing anyone should learn when you start learning about cryptography.

? I thought passwords were stored in .pwl 's?

Can be found here: http://elhalf.com/xorcrypt.txt
Sample code: http://elhalf.com/Xor.java