> there will be always more to find in a complex legacy protocol like this ..

Wouldn't it be simpler to drop in a CTF replacement unless the ability to read/write to any window, from any other session is generic to Windows.