WinDbg to analyze the core dump to pinpoint the process that triggered the offending syscall, then reproducing the problem via the advanced config flag.