I'm debugging a WinRT async method call which fails. How can I locate where the problem arises? I think this could be done by tracking where the error is firstly reported. Any clues? I'm using IDA Pro & VS 2013.
After deeply debugging I think I found where the error is fristly read - by the ntdll "NtGetCompleteWnfStateSubscription" undocomented function (you could check the linked question for more details about it). But I can't seek what function sets it. Also I can't debug the "NtGetCompleteWnfStateSubscription" function itself as it's a kernel one.
This is a more generic question. It's origin from this one.