what is the best way to crack s/w that acccess the web to check s/n?

[dyn!o]

I think we said enough. Now other folks should join and try to help (think).

My small personal note: it looks you didn't read our posts. You tried Ethereal and stop the work because it crash? I know at least few other very good sniffers and why you even need them to discover the transmission? I see XceedFtp.dll file which is responsible for the transmission and is even easier to analyze because it was builded with VC, not VB (like the main exe).

Why not to set a breakpoint at the moment of key file reading (you own the file)? You will be one step before the FTP communication takes place.

Regards.