From 7d5e884c3f0c1359fb9e9e4829188c8bdc57b23f Mon Sep 17 00:00:00 2001
From: Matt Graeber <mattgraeber@gmail.com>
Date: Sat, 25 May 2013 08:58:24 -0400
Subject: ProcessParameters now displays properly

---
 ReverseEngineering/Get-PEB.format.ps1xml | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

diff --git a/ReverseEngineering/Get-PEB.format.ps1xml b/ReverseEngineering/Get-PEB.format.ps1xml
index 88eee6a..3d075eb 100644
--- a/ReverseEngineering/Get-PEB.format.ps1xml
+++ b/ReverseEngineering/Get-PEB.format.ps1xml
@@ -74,8 +74,7 @@
                                 <PropertyName>InInitializationOrderModuleList</PropertyName>
                             </ListItem>
                             <ListItem>
-                                <Label>ProcessParameters</Label>
-                                <ScriptBlock>"0x$($_.ProcessParameters.ToString("X$([IntPtr]::Size * 2)"))"</ScriptBlock>
+                                <PropertyName>ProcessParameters</PropertyName>
                             </ListItem>
                             <ListItem>
                                 <Label>SubSystemData</Label>
@@ -411,8 +410,7 @@
                                 <PropertyName>InInitializationOrderModuleList</PropertyName>
                             </ListItem>
                             <ListItem>
-                                <Label>ProcessParameters</Label>
-                                <ScriptBlock>"0x$($_.ProcessParameters.ToString("X$([IntPtr]::Size * 2)"))"</ScriptBlock>
+                                <PropertyName>ProcessParameters</PropertyName>
                             </ListItem>
                             <ListItem>
                                 <Label>SubSystemData</Label>
@@ -705,8 +703,7 @@
                                 <PropertyName>InInitializationOrderModuleList</PropertyName>
                             </ListItem>
                             <ListItem>
-                                <Label>ProcessParameters</Label>
-                                <ScriptBlock>"0x$($_.ProcessParameters.ToString("X$([IntPtr]::Size * 2)"))"</ScriptBlock>
+                                <PropertyName>ProcessParameters</PropertyName>
                             </ListItem>
                             <ListItem>
                                 <Label>SubSystemData</Label>
-- 
cgit v1.2.3