From 6e5338c8a34ade0ec0a4704031109fb5187620f8 Mon Sep 17 00:00:00 2001
From: Matt Graeber <mattgraeber@gmail.com>
Date: Fri, 31 May 2013 18:56:57 -0400
Subject: Fixed architecture detection bug in Get-PEB

I was checking processor architecture when I should have been checking
OS architecture.
---
 ReverseEngineering/Get-PEB.ps1 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ReverseEngineering/Get-PEB.ps1 b/ReverseEngineering/Get-PEB.ps1
index 7f3a2a2..1a196ac 100644
--- a/ReverseEngineering/Get-PEB.ps1
+++ b/ReverseEngineering/Get-PEB.ps1
@@ -174,7 +174,7 @@ http://msdn.microsoft.com/en-us/library/windows/desktop/aa813706(v=vs.85).aspx
             return
         }
 
-        $OSArchitecture = (Get-WmiObject Win32_Processor).DataWidth
+        $OSArchitecture = [Int](Get-WmiObject Win32_OperatingSystem).OSArchitecture.Split('-')[0]
 
         try { $NativeUtils = [NativeUtils] } catch [Management.Automation.RuntimeException] # Only build the assembly if it hasn't already been defined
         {
-- 
cgit v1.2.3