Finding the memory area involves running code on the device that scans the entire memory range (catching data aborts where needed).

As for figuring out what the code does, it's a combination of staring at the hex, disassembly and semi de-compiled code.