RAM dump analysis