Some software doesn’t check if it’s purchase, so in that case one just needs the files or installer. If the software does check, one would find a vulnerability in the code that is checking if the game or software was purchased and work around the check.