If you're using Visual Studio, you could compile in debug mode, stop the program in the debugger and look for which variables are initialised to bytes containing 0xCC (stack) or 0xCD (heap).
Though personally, I'd invest in a static analysis tool for a more thorough approach.