*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
ATTEMPTED_WRITE_TO_READONLY_MEMORY (be)
An attempt was made to write to readonly memory. The guilty driver is on the
stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: ffffab800c2bd478, Virtual address for the attempted write.
Arg2: 8a00000000200121, PTE contents.
Arg3: fffff505f753edd0, (reserved)
Arg4: 000000000000000a, (reserved)
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for win32k.sys
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 11780
Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on EMB
Key : Analysis.DebugData
Value: CreateObject
Key : Analysis.DebugModel
Value: CreateObject
Key : Analysis.Elapsed.mSec
Value: 27394
Key : Analysis.Memory.CommitPeak.Mb
Value: 76
Key : Analysis.System
Value: CreateObject
Key : WER.OS.Branch
Value: vb_release
Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z
Key : WER.OS.Version
Value: 10.0.19041.1
ADDITIONAL_XML: 1
OS_BUILD_LAYERS: 1
BUGCHECK_CODE: be
BUGCHECK_P1: ffffab800c2bd478
BUGCHECK_P2: 8a00000000200121
BUGCHECK_P3: fffff505f753edd0
BUGCHECK_P4: a
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: System
TRAP_FRAME: fffff505f753edd0 -- (.trap 0xfffff505f753edd0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=ffffab800c2bd460
rdx=0000000000000005 rsi=0000000000000000 rdi=0000000000000000
rip=fffff804686fe3a9 rsp=fffff505f753ef60 rbp=ffff836007c74c90
r8=ffff8341a0d06000 r9=ffff8341a0d067f8 r10=0000fffff804686c
r11=ffff75f890000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
nt!MiLockSetPfnPriority+0x11:
fffff804`686fe3a9 f0480fba69183f lock bts qword ptr [rcx+18h],3Fh ds:ffffab80`0c2bd478=????????????????
Resetting default scope
STACK_TEXT:
fffff505`f753ebd8 fffff804`68887908 : 00000000`000000be ffffab80`0c2bd478 8a000000`00200121 fffff505`f753edd0 : nt!KeBugCheckEx
fffff505`f753ebe0 fffff804`68612def : 8a000000`00200121 00000000`00000003 fffff505`f753ee50 00000000`00000000 : nt!MiRaisedIrqlFault+0x14c084
fffff505`f753ec30 fffff804`687ec01e : fffff804`660f12f8 ffff8600`aa306088 fffff505`f753ef01 00000000`00000003 : nt!MmAccessFault+0x4ef
fffff505`f753edd0 fffff804`686fe3a9 : fffff804`6904f040 0000000f`ffffffff fffff505`f753f460 00000000`00000003 : nt!KiPageFault+0x35e
fffff505`f753ef60 fffff804`686c37ef : ffffab80`0c2bd460 ffffaa00`00000000 ffffaa00`00000000 ffff998b`2a8d0010 : nt!MiLockSetPfnPriority+0x11
fffff505`f753ef90 fffff804`686c2f84 : ffffab80`0c2bd460 00000000`00000000 ffffc00f`8e992000 fffff505`f753f460 : nt!MiAgePteWorker+0x3ef
fffff505`f753eff0 fffff804`686119f1 : 00000000`00000000 fffff505`f753f560 00000000`00000000 00000000`00000000 : nt!MiAgePte+0x134
fffff505`f753f080 fffff804`68611d10 : 00000000`00000000 fffff804`6904f040 ffff8341`00000000 00000000`00000000 : nt!MiWalkPageTablesRecursively+0x301
fffff505`f753f110 fffff804`68611d10 : 00000000`00000000 fffff804`6904f040 ffff8341`00000000 00000000`00000010 : nt!MiWalkPageTablesRecursively+0x620
fffff505`f753f1a0 fffff804`68611d10 : fffff505`f753f560 fffff804`6904f040 ffff8341`00000000 00000000`00000020 : nt!MiWalkPageTablesRecursively+0x620
fffff505`f753f230 fffff804`6860e61b : 00000000`00000002 fffff804`6904f040 fffff505`00000000 00000000`00000030 : nt!MiWalkPageTablesRecursively+0x620
fffff505`f753f2c0 fffff804`6860df01 : fffff505`f753f560 00000000`00000000 00000000`00000001 fffff804`00000000 : nt!MiWalkPageTables+0x36b
fffff505`f753f3c0 fffff804`6860d609 : ffff8600`aa737100 00000000`00000001 ffff8600`aa7371c0 00000000`00000000 : nt!MiAgeWorkingSet+0x3d1
fffff505`f753f8d0 fffff804`6860cdb7 : 00000000`00000000 fffff505`f753fa80 fffff505`f753fa40 00000000`00000000 : nt!MiTrimOrAgeWorkingSet+0x3c9
fffff505`f753f9c0 fffff804`686e5788 : fffff804`69050ac0 fffff505`f753fa80 00000000`00004cc4 ffff8600`00000203 : nt!MiProcessWorkingSets+0x227
fffff505`f753fa60 fffff804`687a3757 : 00000000`00000008 00000000`00000008 00000000`ffffffff ffff8600`a9d40180 : nt!MiWorkingSetManager+0xb8
fffff505`f753fb20 fffff804`68746745 : ffff998b`14e8e040 00000000`00000080 fffff804`687a3600 00000000`00000000 : nt!KeBalanceSetManager+0x157
fffff505`f753fc10 fffff804`687e5598 : ffff8600`aa18e180 ffff998b`14e8e040 fffff804`687466f0 00000000`00000000 : nt!PspSystemThreadStartup+0x55
fffff505`f753fc60 00000000`00000000 : fffff505`f7540000 fffff505`f753a000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
SYMBOL_NAME: nt!MiRaisedIrqlFault+14c084
MODULE_NAME: nt
IMAGE_VERSION: 10.0.19041.450
STACK_COMMAND: .thread ; .cxr ; kb
IMAGE_NAME: ntkrnlmp.exe
BUCKET_ID_FUNC_OFFSET: 14c084
FAILURE_BUCKET_ID: 0xBE_nt!MiRaisedIrqlFault
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {1c5b4d11-09e0-def3-d2d0-70a11d69b92d}
Followup: MachineOwner
---------