transformations.

Make sure kernel32 and ntdll have a full path name even though they
are loaded before we know the system dir.

with an object that it wants to know when the object is deleted. Until
the dc gets delete notification it's free to assume that it doesn't
need to write the create record for that object again.  Upon receiving
the delete notification it writes the DeleteObject record. Windows
seems to do it this way too.

thread instead of the TEB.

register.

Win9x one.

Bool->bstr makes a number str unless [ALPHA|LOCAL]BOOL is passed.

Fix the date inlines.
Round negative numbers with fractional parts > 0.5 correctly.

Updated date format from YYMMDD to YYYYMMDD.
Changed a few output messages so they are more
intuitive/constructive/up to date.

toolbar, not the color of the top left pixel of the image.

Add small test to make sure it doesn't return.
Don't import ntdll for tests, we need to load it dynamically.

binaries, to prevent exec shield from mapping system libraries there.

CompareString tests.