It's not like this kind of stuff can't be found by reverse engineering. For Windows specifically, the ReactOS team is doing lots of it to document the inner workings of internal Windows APIs so they could reimplement them.