Uploaded September 2023 | Updated September 2026, 1 week ago
This level select module is called "areaselect.c", and in 836 is normally inaccessible. It looks as if at one point this used to be the regular level select, there is no indication of it being for score attack and instead it just lists stage difficulty, track artist and track name.
The artist and track names are mostly placeholder in this build however.
Choosing a stage here will display the area login text unlike the normal level select in this build.
To access this, hijack the pointer for the 'areachoose.c' module, which is at 0x8c09a35a (0x2c in cheat engine with demul). If you change the value of the 4 bytes here to 8c104d78, you will go to this level select when you click play on the title screen.
I made a bonus video showing the login strings when forcing the other three stages in this build: youtube.com/watch?v=irulytlTD5o
This level select module is called "areaselect.c", and in 836 is normally inaccessible. It looks as if at one point this used to be the regular level select, there is no indication of it being for score attack and instead it just lists stage difficulty, track artist and track name.
The artist and track names are mostly placeholder in this build however.
Choosing a stage here will display the area login text unlike the normal level select in this build.
To access this, hijack the pointer for the 'areachoose.c' module, which is at 0x8c09a35a (0x2c in cheat engine with demul). If you change the value of the 4 bytes here to 8c104d78, you will go to this level select when you click play on the title screen.
I made a bonus video showing the login strings when forcing the other three stages in this build: youtube.com/watch?v=irulytlTD5o
