The phrase you want to google is "reverse engineering from memory dump". Prepare to be astounded. You need to know how machine instructions work, details of th

The phrase you want to google is "reverse engineering from memory dump". Prepare to be astounded. You need to know how machine instructions work, details of the operating system, and a bunch of other things... but any number of copy-protection systems have been bypassed this way. Any number of devices have had their firmware dumped, their memory scanned, and the resulting data analyzed to make patches or build compatible systems.