3
First of all, direct answer to your specific question: take a look at DDE, this can cause the VB form to change almost anything at runtime.
However, I have a better answer for you:
Odds are the VB client app is not using an encrypted protocol (such as SSL) - you can just intercept the network...