Small whitepaper describing the obfuscation algorithm used by Windows 2k/NT/XP Syskey and the steps required to remove its encryption from the password hashes. Tools to automate the process included.
You can download it from the following link: https://packetstormsecurity.com/files/download/32453/Syskey.zip
Source: https://packetstormsecurity.com/files/32453/Syskey.zip.html