Restoring with High Sierra & APFS, Blue Screen

erictbar · September 9, 2017, 10:44pm

After Restoring my Boot Camp partition using Winclone 6.1.2 on macOS High Sierra (17A360a) with APFS, I get a blue screen with the following message when loading into Windows:

Your PC/Device needs to be repaired
The application or operating system couldn’t be loaded because a required file is missing or contains errors

File: \Windows\system32\winload.efi
Error code: 0xc000000e

I have tried using bootrec in a Windows restore. I have tried toggling between Legacy and EFI Bootable. If I reinstall Windows from a DVD, it works fine. This occurs with 2 *.winclone files, the first one is running an outdated build of Fall Creators I created with Winclone 6, the other is from June I’m pretty sure is right before I installed my first Insider Build.

I am trying to restore a formerly 50GB Windows partition onto a new 70GB partition.

I am running macOS 10.13 (17A360a) on a MacBook Pro (Retina, 13-inch, Early 2013) with a 256GB SSD.

tperfitt · September 10, 2017, 3:43pm

A couple of ideas:

Try disabling SIP and restore again.
Was this version of Windows running on this MacBook Pro before? It is possible that the MacBook 2013 doesn’t support EFI booting.
Was Windows installed by booting up via the install media versus via Boot Camp assistant? If that is the case, then Winclone has to copy files from a separate boot partition and they may not have been successfully restored. You’ll see something in the log about “split configuration” if that is the case.

tim

erictbar · September 10, 2017, 7:48pm

Tried after disabling SIP and still same. This is the same MacBook that is being restored to and cloned from so if it supported Windows Fall Creators before it should now.

I ran the restore again and looked closer at the logs. Actually found an error while checking for filesystem consistency

Sandbox: com.twocanoes.Wi(514) System Policy: allow file-read-data /dev/disk0
Violation: System Policy: allow file-read-data /dev/disk0
MetaData: {“build”:“Mac OS X 10.13 (17A360a)”,“action”:“allow”,“target”:[“dev”,“disk0”],“hardware”:“Mac”,“platform_binary”:“no”,“profile”:“unknown”,“process”:“com.twocanoes.Wi”,“op”:“file-read-data”}

Process: com.twocanoes.Wi [514]
Path: /Library/PrivilegedHelperTools/com.twocanoes.WincloneHelper
Load Address: 0x10f41e000
Identifier: com.twocanoes.WincloneHelper
Version: ??? (???)
Code Type: x86_64 (Native)
Parent Process: launchd [1]
Responsible: /Library/PrivilegedHelperTools/com.twocanoes.WincloneHelper [514]
User ID: 0

Date/Time: 2017-09-10 15:40:33.789 EDT
OS Version: Mac OS X 10.13 (17A360a)
Report Version: 8

Thread 0 (id: 6509):
0 libsystem_kernel.dylib 0x00007fff7d2b5e76 mach_msg_trap + 10
1 CoreFoundation 0x00007fff55bdec45 __CFRunLoopServiceMachPort + 341
2 CoreFoundation 0x00007fff55bddf97 __CFRunLoopRun + 1783
3 CoreFoundation 0x00007fff55bdd607 CFRunLoopRunSpecific + 487
4 Foundation 0x00007fff57c623f6 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 277
5 Foundation 0x00007fff57c622ce -[NSRunLoop(NSRunLoop) run] + 76
6 com.twocanoes.WincloneHelper 0x000000010f4239a2
7 com.twocanoes.WincloneHelper 0x000000010f4252f9
8 libdyld.dylib 0x00007fff7d16f145 start + 1
9 com.twocanoes.WincloneHelper 0x0000000000000001

Thread 1 (id: 6515):
0 libsystem_kernel.dylib 0x00007fff7d2bed12 __open_nocancel + 10
1 com.twocanoes.WincloneHelper 0x000000010f421ebf
2 com.twocanoes.WincloneHelper 0x000000010f42c2ed
3 com.twocanoes.WincloneHelper 0x000000010f428a86
4 com.twocanoes.WincloneHelper 0x000000010f427cf9
5 com.twocanoes.WincloneHelper 0x000000010f42908e
6 libdispatch.dylib 0x00007fff7d13d7a2 _dispatch_call_block_and_release + 12
7 libdispatch.dylib 0x00007fff7d135f64 _dispatch_client_callout + 8
8 libdispatch.dylib 0x00007fff7d142e79 _dispatch_queue_override_invoke + 880
9 libdispatch.dylib 0x00007fff7d137b56 _dispatch_root_queue_drain + 515
10 libdispatch.dylib 0x00007fff7d137902 _dispatch_worker_thread3 + 101
11 libsystem_pthread.dylib 0x00007fff7d3f91ca _pthread_wqthread + 1387
12 libsystem_pthread.dylib 0x00007fff7d3f8c4d start_wqthread + 13

Thread 2 (id: 6516):
0 libsystem_kernel.dylib 0x00007fff7d2bf6da __workq_kernreturn + 10
1 libsystem_pthread.dylib 0x00007fff7d3f8c4d start_wqthread + 13

Thread 3 (id: 6571):
0 libsystem_kernel.dylib 0x00007fff7d2bf6da __workq_kernreturn + 10
1 libsystem_pthread.dylib 0x00007fff7d3f8c4d start_wqthread + 13

Thread 4 (id: 6576):
0 libsystem_kernel.dylib 0x00007fff7d2bf6da __workq_kernreturn + 10
1 libsystem_pthread.dylib 0x00007fff7d3f8c4d start_wqthread + 13

Thread 5 (id: 9509):
0 libsystem_kernel.dylib 0x00007fff7d2bf6da __workq_kernreturn + 10
1 libsystem_pthread.dylib 0x00007fff7d3f8c4d start_wqthread + 13

Thread 6 (id: 9510):
0 libsystem_kernel.dylib 0x00007fff7d2bf6da __workq_kernreturn + 10
1 libsystem_pthread.dylib 0x00007fff7d3f8c4d start_wqthread + 13

Thread 7 (id: 9512):
0 libsystem_kernel.dylib 0x00007fff7d2bf6da __workq_kernreturn + 10
1 libsystem_pthread.dylib 0x00007fff7d3f8c4d start_wqthread + 13

Binary Images:
0x10f41e000 - 0x10f442ff7 com.twocanoes.WincloneHelper (0) <08eac44a-dc04-32ae-8383-fc76502bc077> /Library/PrivilegedHelperTools/com.twocanoes.WincloneHelper
0x7fff55b5c000 - 0x7fff55ff4ff7 com.apple.CoreFoundation (6.9 - 1443.13) /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x7fff57c41000 - 0x7fff58004fff com.apple.Foundation (6.9 - 1443.14) <360eb3b4-cd31-380e-8e77-4954559f97f8> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x7fff7d134000 - 0x7fff7d16dff7 libdispatch.dylib (913.1.6) <0dd78497-6a2a-350a-99ef-15bf41ea07dd> /usr/lib/system/libdispatch.dylib
0x7fff7d16e000 - 0x7fff7d18bff7 libdyld.dylib (519.2.1) <2597d818-42d2-3375-bd9d-451d5942a6ba> /usr/lib/system/libdyld.dylib
0x7fff7d2a3000 - 0x7fff7d2c8ff7 libsystem_kernel.dylib (4570.1.46) <71ba15cb-3056-3cbd-a5f5-ee61566eea0c> /usr/lib/system/libsystem_kernel.dylib
0x7fff7d3f6000 - 0x7fff7d401ff7 libsystem_pthread.dylib (301.1.6) <6d0b0110-2b44-3d3c-b672-bd08fe46378a> /usr/lib/system/libsystem_pthread.dylib

tperfitt · September 10, 2017, 10:54pm

thanks for the info. That backtrace is when Winclone tries to read from disk0 but SIP would prevent it (though it is allowed since you disabled SIP). you can see that here:

Sandbox: com.twocanoes.Wi(514) System Policy: allow file-read-data /dev/disk0
Violation: System Policy: allow file-read-data /dev/disk0

(The bolded allow means that the read was allowed and since it is allowed, it means that SIP was disabled since it normally would block read access to disk0).

Can you send me the entire log? Submit it via the Winclone app (In the help menu, select “Open Support Ticket” and make sure to both include the log and put a link to this post in the description. Also, this only captures 30 minutes of log activity, so please make sure the error message happened recently or it won’t be reflected in the logs.

dv1 · October 5, 2017, 8:12pm

Was this issue resolved? I’m having the same problem restoring.

jez69 · October 6, 2017, 11:57am

Hello make a partition with disk utility not with bootcamp assistant for restore winclone image. Working for me…

erictbar · October 6, 2017, 12:12pm

No I ended up having to start from scratch. Luckily I don’t have much data on my Windows partition so it just ended up being a day of restoring apps and settings.