KCBNeedsVirtualImage_0

BOOL __fastcall KCBNeedsVirtualImage_0(INT64 a1){
  BOOL result; 
  UINT64 *v2; 
  if( CmpVEEnabled && (*(_DWORD *)(a1 + 184) & 0x2000000) == 0 && (result = CmpIsKcbInsideVirtualizedHive(a1)) )
  {
    LOBYTE(v2) = *((_BYTE *)KeGetCurrentThread() + 562);
    LOBYTE(result) = CmpIsSystemEntity(v2) == 0;
  }
  else
  {
    LOBYTE(result) = 0;
  }
  return result;
}

Referenced by:

CmQueryKey
CmQueryLayeredKey