From a11c94a82b99aa3899853b44fa4b5b8935b91963 Mon Sep 17 00:00:00 2001
From: Anthony Fey <anthonyfey@gmail.com>
Date: Fri, 4 Jun 2021 18:52:00 +0200
Subject: [PATCH] Fixed CM_KEY_VALUE get_decode method

---
 volatility3/framework/symbols/windows/extensions/registry.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/volatility3/framework/symbols/windows/extensions/registry.py b/volatility3/framework/symbols/windows/extensions/registry.py
index fea385617..fd0136556 100644
--- a/volatility3/framework/symbols/windows/extensions/registry.py
+++ b/volatility3/framework/symbols/windows/extensions/registry.py
@@ -260,7 +260,7 @@ class CM_KEY_VALUE(objects.StructType):
             # but the length at the start could be negative so just adding 4 to jump past it
             data = layer.read(self.Data + 4, datalen)
 
-        self_type = RegValueTypes.get(self.Type)
+        self_type = RegValueTypes(self.Type)
         if self_type == RegValueTypes.REG_DWORD:
             if len(data) != struct.calcsize("<L"):
                 raise ValueError("Size of data does not match the type of registry value {}".format(self.get_name()))