Comment by Sir68k

Finding the memory area involves running code on the device that scans the entire memory range (catching data aborts where needed).

As for figuring out what the code does, it's a combination of staring at the hex, disassembly and semi de-compiled code.