Flattened netlist simulation backdoor access

What would be the best way to access registers in a flattened netlist through the backdoor? You wouldn’t have just one path slice you could add.
For example:
ctrl_reg[31:0]

Flattened the path looks like:

“…ctrl_reg_0/q”
“…ctrl_reg_1/q”
“…ctrl_reg_2/q”

Currently I’m using forcing scripts/$deposit, but this would be nice. Thank you.