Well, isn't there a way/tool to, from the main section of the script, find out which memory locations aren't accessible? Everything should be accessible (except for closures) and all of that can be pointed out. You can then read through the output, mark off which you know to be closures, and then you have your answer...
------ /me wants to be the brightest bulb in the chandelier!