|
One app I reversed a long time ago learned the time by creating a dummy file and then reading the time stamp of the file (Then it erased it) so a run with filemon and api like FileTimeToSystemTime and the like might give you something.
On the other hand, one sure thing that happens after an hour is that the app QUITS.
What about looking for API that close an app? PostQuitMessage for instance.
Finally, the use of a good api monitor like APISPY may help you find your guilty API sooner.
|