Ghidra Check Protector
Which non-trivial functions don't reference the stack canary checker (or other, user-defined function)?
Place your cursor to the entry point of the protector function before executing the script!
Complexity threashold for reporting needs to be tweaked in the source.