Geez, so sorry it took me so long to reply to this. I missed it :(.
There are tools that look for opcode patterns and match segments against known signatures for GPL code, similar to how antivirus/malware tools can use "signatures" to identify malicious code. So yeah, it's generally matching...