H9 Control and the H9 don't communicate using MIDI CC messages; they're sending special MIDI sysex messages. Because the H9 works wirelessly over Bluetooth, we wanted to add an extra layer of protection to the communication between the H9 and H9 Control beyond a four number pin. So, the messages passing back and forth between the H9 and H9 Control over MIDI sysex are encrypted using a session key. I don't think you'll be able to record and replay these messages, because if I remember correctly, the session key changes every time you connect to the app to the H9. So, any messages you recorded during one session couldn't be replayed in a later session.
To do what you want to do, maybe you could use a MIDI control app instead of H9 Control to change the parameter values on the H9 that sends out MIDI CC values?