Moschtermeedchen
Level 1
(8 points)
Q: Boot camp Win 7 0x34 blue screen when starting windows after restore with system image.
The hard disc on the Macbook pro had been repartioned, all boot camp and other drivers updated and Windows installed from the installation DVD. All available Windows updates from 2012 (installation disc is from 2012) until today were installed and Boot camp 5.1 with all its drivers installed. Restoring was started with a system repair disc and system image from an external hard disc. Once Windows loads after the log-in screen, it crashes. A blue screen appears with the error code 0x00000034 and mentioning cache_manager.... Windows restarts itself and I can only use it in safe mode which means that I can neither download nor install upgrades or programs.
Analysing the dmp-file from the first crash with Windows Debugger Tool showed that the problem seems to lie with
AppleHFS.sys and svchost.exe, with Bug Check 34 {107, ffffffffc0000420,0,0}.
Here is the link to the complete analysis of the dmp file for further details:
https://1drv.ms/u/s!AuzUtP_j9nLagwWWqWUTre4qNYmu
Many thanks in advance for your help
Moschtermeedchen
MacBook Pro (13-inch Mid 2012), OS X El Capitan (10.11.6), blue screen 0x34
Loner T
Level 7
(23,898 points)
A Windows System Image restore on a Mac is tricky. In your specific case, the restore created entries which were appropriate for the original size of System Image (297GB), but the underlying partition was 400GB. Since the image was legacy BIOS/MBR mode, which is on page 2. You can see two entries for index 2 and 3, each. AppleHFS.sys should show you entry GPT 2 (start sector 409640), but the System Image has the same entry at start sector 195523144. This causes AppleHFS.sys to bug check and cause the BSoD. There is no device at the start sector 195523144. This causes an endless BSoD loop unless AppleHFS.sys is disabled.
We did two fixes.
1. Removed the spurious entries 2 and 3 at start sector 195523144 and start sector 389081512. The GPT was rebuilt leaving Free Space between 195523144 and 390352896 (this is the 'missing' 103 GB).
2. After GPT was corrected, trying to repair the original 297GB system image caused the BCD to be renamed as BCD.old. We restored bcd.old to BCD, repaired the original installation and used GParted to coalesce the 297 and 103 GB parts. This required a second repair, reusing the bcd.old. Once Windows was working and GPT was corrected, we rebuilt the MBR to match. Since there are no more spurious entries for GPT2 and GPT3, AppleHFS.sys/AppleMNT.sys now correctly map the partitions and show them on the Windows side.
You should create a new System Image backup of this 400GB Windows and discard the old 297GB System Image.
