def decrypt(username, salt, password):
    result = bytearray()
    for i in range(16):
        val = (salt[i] ^ password[i]) - username[i]
        if 0 <= val <= 256:
            result.append(val)
        else:
            result.append(256 + val)
    return result

>>> salt = bytearray("!" * 14 + "\xa0\x00")
>>> username = bytearray("!" * 14 + "\xa0\x00")
>>> password = read_password("885e039ad756a6bd569797fd7f5b7d6d")
>>> p = decrypt(username, salt, password)
>>> [hex(i) for i in p]
['0x9a', '0x1', '0x5e', '0x88', '0x7b', '0x66', '0x56', '0xd5', '0xbb', '0x95', '0x95', '0x56', '0x2b', '0x3b', '0x5b', '0x7f']

# Where the secretpass, as seen from radare2, is ...
# 0x0804d0e0  9a01 5e88 7b66 56d5 bb95 9556  ..^.{fV....V
# 0x0804d0ec  2b3b 477f 0000 0000 0000 0000  +;G.........