2 ways: fast guessing or thorough analysis ➡️extracting AutoIt script ➡️finding relevant code in large scripts ➡️string decryption ➡️quick shellcode analysis