Pausing point for the night. Found out that previous versions had implemented the MSOfDay timestamp in the log files incorrectly. The header and most footers are in UTC, but the timestamps are in the local timezone. Unfortunately at this point I have two months worth of logs, so I'm off to write a tool to fix the timestamps so two months worth of logs don't go to waste.