Windows NT4 stack and heap address space

2019-07-31 05:45发布

问题:

I'm trying to search for an integer value in the stack and heap memory of Windows NT4. This integer is used by another program.

The problem is I don't know the address range of the stack and heap, is there a way to find the range of this address space?

Previously I've tried searching this integer value in the code space by using EnumProcessModules function of PSAPI (a windows api). From this function, I get the addresses containing the modules of the program which I can then search through to find some variables. This technique works for simple programs like Minesweeper, somehow, it fail to find any useful integer or variables in more complex programs.

Thanks in advance to anybody who can help me with this.