volatility -f /path/to/memory/dump.001 --profile=<profile> procdump -p <pid of process> --dump-dir=./path/to/save/to/
This will dump the process so you can analyse it, run strings and such
volatility -f /path/to/memory/dump.001 --profile=<profile> memdump -p <pid of process> --dump-dir=./path/to/save/to/
This will dump the process and all of its loaded modules so you can analyse it, run strings and such. Use strings -a -t d -e l to treat everything as text.