CoSMOS Gamehacking Tool

Hi,

I decided to play the Treasures of Montezuma 5, but, as it sometimes happens - got stuck on a level due to time constraints.

I fired up the CoSMOS hoping to stop the timer on a level, on, at least, make the timer 999 minutes instead of 3 minutes 20 seconds.

here's what I've tried:

- Scan memory for value type float
- Search type - Unknown Value

After that I've been searching for Increased Value. Eventually my list was down to about 60 memory addresses that were increasing with the level timer decreasing. So, I froze 60 addresses but the timer was still decreasing...

Then I Reset Scan and spend 15 minutes catching memory addresses with Decreased Value. That did not get me anywhere.

After that I Reset Scan and started searching for Changed Values. Got about 60,000 addresses and decided to top it.

I also poked around with What Writes To This Address. Got a game to crush several times.

Could anyone please suggest, like, what do I do -- how do I hack Treasures of Montezuma 5 for things like allowed time on a level counting the facts:

- allowed time on a level varies
- one guy said game keeps the time in float
- time, allowed on that particular level is 3 minutes and 20 seconds
- search for 3.2 (3 minutes 20 seconds) or 2.65 (2 minutes 65 seconds to the You Failed message)

Thank you in advance

In most games timers are stored as float where 3 minutes and 20 seconds would be a value of 200 (3 * 60 + 20). If your computer is fast enough I recommend scanning for the value in data type ALL however as rarily games store the timer also as integer (4 bytes) and if you scan for such a high specific value it doesn't cost much time anyway.

I don't know your game but thats the popular method. Another method is the timer counts up instead of down until a value is reached, where I would try to search for a specific value at first. So if your timer starts at 60 seconds and you paused the game at 55 seconds left. Scan for value 5 data type all. Then resume and if you passed 10 seconds of timer then scan for 10 and so on.

Then there are games that makes it impossible to find the timer by a value because it's not stored as a value. Instead the game stores a date or hashsum of a date and compares it against the current date. This method you will not find by scanning for a value directly. You have to scan for value that is somehow related to the timer. For example you got a value that looks like the timer but freezing it doesn't do anything. This means its a visual address that gets updated by the timer but does not affect the timer. THen you have to put a breakpoint on it, find the function that updates it and search backwards the code until you found the code that actually contains the timer. Then depending on how it looks like you have to find a way to pause/freeze or disable it. It requires assembly knowledge obviously.

0x90 Thank you for taking the time to reply to me.

I tried searching for 200 and then 198 and so on. Did not get anywhere -- a tool would find me 200 and 198 but it would always be a different memory address.

Tried searching for 5, 6, 7 (passed seconds) - also did not work for me. Same story - the tool would find memory addresses with value 5 or 6 or 7 but it will all be different address, not like the same address

I guess you're right on track when you say some games work with a hash. That's totally way over my head

Thank you again. I tried, did my best, even asked here...