Decryptable password is stored in world-readable registry key.
vulners.com/securityvulns/securityvulns:doc:11715