I wrote a VCL app using Delphi10.2. It has a simple activation setup, encrypted key is stored in Kinvey backend. The key to decrypt the encrypted key is hidden in the source code.
Now in order to establish the HTTPS connection, the app needs Indy's ssl files libeay32.dll and ssleay32.dll. They are attached in the same folder with the exe.
My questions are: is it possible somehow to use the DLL files to extract the private key to decrypt the HTTPS traffic? If so, will the attacker be able to dectpyt the encrypted key?