Hi all!
Today I got a comment to my blog about this specific post: http://zairon.wordpress.com/2011/06/18/some-notes-on-how-to-find-out-hidden-callbacks/

The author says: "It`s definitelly possible to write code which will find right addresses of CmpCallBackVector/CmpCallBackCount or CallbackListLock/CallbackListHead on all windows versions (including w8 preview versions, both 32/64bit)". It sounds interesting!

Here is a link to his tool called wincheck: http://redplait.blogspot.com/2012/03/wincheck-rc89.html
There's also a little documentation available at: http://redplait.blogspot.com/2011/11/wincheck-doc.html

I didn't know this tool and I haven't tried it yet but I think someone could find it usefull... atleast I hope

Best regards,
ZaiRoN