Wow, thanks Blayer!!
I tried all 11 HouseLoadRegulator message IDs, this time with no body attached, and identical to starttime.dat except for the message ID field.
0x9B7ED631 causes an access violation, however, if you skip over the offending instruction, then the client otherwise still...