I remember playing around with UPnP a few years back. I put together a bit of VB to run some UPnP queries, but never got any further (I think mainly because every device I tried needed a slightly different set of queries).

BlurredD, you're welcome to that code if it'll help.