Finding Address of Clock/Timer in NFSPU - Need help

[TippeX]

could also be floats
or stored as 64 bit value, microseconds etc..
which it then divides runtime, to do the display

alternatively, most of the games use wsprintf to do the actual formatting
so u could look through the code for stuff like '%2d:%2d:%2d' and cross reference them...