Is the KMSpico legit?

Is KMSpico legit - It's not verifiable.

At least, without putting in effort to reverse-engineer the software. As it turns out, "How trustworthy is [this software]?" is in general an incredibly tough question to answer. The problem is that it's hard to verify, especially if no source-code is present. Even if source code were present, how can you know that the pre-built version would correspond to that source code? In the "best case" scenario, the program is benign and does what it's supposed to do (which is still illegal and may get you into trouble). In the most likely case, the program will do what it's advertised to do, plus a number of other things. Which things? That depends on the author. Consider the following: Would you let a random stranger have admin access to your computer if they gave you 139 USD for it?