Yes allot of it is random testing, Ive found several buffer overruns by this method.

You can also decompile the code and work from there I dont have a great deal of knowledge of doing this, but...