There seems to be no way to do this. For example, when a control scrolls, all content is scrolled (copied) by calling the ScrollWindow API, and the rest of the control is invalid.
All other hacks, such as handling scroll events and drawing over a control surface, are not suitable.
source
share