While doing a quick look, and looking at "pcang" and "pcango", the password was almost identical... almost like a strtran() pattern, but starting with a specific character offset based on the string or something...

To better get some samples, try to create some more users like

abcdefghij
bcdefghijk
cdefghijkl
defghijklm
efghijklmn
...
lmnopqrstu
...
vwxyzabcde

Then try to submit the IDs and passwords from that... You may also try to do based on UPPER Case to see if its case sensitive or not or forcing to lowercase before encrypting... such as

abcdefghij
ABCDEFGHIJ
AbcDEfGhIJ
aBcdefgHiJ

I'll try some more after seeing more from these samples.