check for NTDDI_WINBLUE