How are these discovered?

Is it just a well informed guess or do people decompile these programs?