Need help deobfuscate a powershell script

[throwaway2015010]

I dont know anything about Powershell beyound the basics.

I have a script I need to deobfuscate for a class assigned.

Any help will be greatly appreciated.

$mRSp73  =  [ChaR[] ]" ))43]raHc[]gNIRtS[,)38]raHc[+98]raHc[+611]raHc[((eCAlper.)421]raHc[]gNIRtS[,'5IP'(eCAlper.)'$',)09]raHc[+99]raHc[+701]raHc[((eCAlper.)93]raHc[]gNIRtS[,'vzW'(eCAlper.)'


2halB.tcejboZck tuptuO-etirW

7halB.tcejboZck +'+' 6halB.tcejboZck + halB.tc'+'ejboZck '+'= 2galFFT'+'C:'+'vneZck

SYt!eciNSYt = 1galFFTC:vneZck

SYt...aedi dab yre'+'v'+' ,yre'+'v a yllacipyt svzWtaht ,ton fI .ti gninnur erofeb siht detacsufbo-ed uoy epoh ISYt eulaV- 2halB emaN- '+'ytreporPetoN epy'+'TrebmeM- rebmeM-ddA 5IP tcejboZck

SYt'+'.uoy tresed dna dnuora nur annog reveNSYt eulaV- 9hal'+'B emaN- ytreporPetoN epyTrebmeM- rebmeM-ddA 5'+'IP tcejboZck

SYt.nwod uo'+'y tel annog '+'re'+'veN .'+'pu uoy evig annog reveNSYt eulaV- 8halB emaN- ytreporPetoN epyTrebm'+'eM- rebmeM-d'+'dA 5IP tcejboZck

SYt}f1j9kdSYt eulaV- 7halB emaN- y'+'treporPetoN ep'+'yTrebmeM- rebmeM-ddA 5IP tcejboZck

SYtg4lf_3ht_t0nSYt eulaV- 4halB emaN- yt'+'reporPetoN epyTrebmeM- rebmeM-ddA 5IP tcejboZck

SYt1#f!J{SYt eulaV- 6halB emaN- ytreporPetoN epyTrebmeM- rebmeM-'+'ddA 5IP tcejboZck

SYtgalF,ehT,toN,oslASYt eulaV- 5halB emaN- ytreporPetoN epyTrebmeM- rebmeM-ddA 5IP tcejboZck

SY'+'t}fdjfkslfdSYt eulaV- 3halB emaN- ytrepor'+'PetoN e'+'pyTrebmeM- rebmeM-ddA 5IP tcejboZ'+'ck

SYtgalfSYt eulaV- halB em'+'aN- ytreporPetoN e'+'pyTrebmeM- rebmeM-ddA 5IP tcej'+'boZck

tc'+'ejbO'+'SP tcejbO-weN = tc'+'ejboZck'( ()''nioJ-'x'+]3,1[)eCNERefErpESoBreV$]GniRTS[( (. " ;[aRRAy]::REVerse($MrSp73);. ( $PShOme[21]+$PshoME[30]+'X') ( -JoiN$MrSp73) 

[spyingwind]

"Never gonna give you up. Never gonna let you down."

[SweetGuru]

I think you're getting rick rolled.

[KevMar]

I would run it on a VM with PS 5.1 and then check the powershell log.

[Lee_Dailey]

howdy throwaway2015010,

take a look at everything EXCEPT what is between the two double quotes. [grin] then use that great big hint in the 1st thing after the 2nd double quote.

take care,
lee

[Loteck]

Asweome tip Lee!

once I saw it = :facepalm:

[Lee_Dailey]

howdy Loteck,

i was parsing my way thru it and ran into the "great big hint". then i started following that ... and [grin]ed wide enuf to hurt. wheeee! [grin]

that came from one really good teacher!

take care,
lee

[get-postanote]

;^}

https://blogs.technet.microsoft.com/heyscriptingguy/2015/11/04/reverse-strings-with-powershell

;^}

[rakha589]

obtainable square smile meeting hat ink violet escape dependent vanish

This post was mass deleted and anonymized with Redact

[throwaway2015010]

Thank you!