Developer knowledge network · moderated exchange

مجتمع الكود غير الموثوق به

أبحاث المطورين، مجتمع الهندسة العكسية والترميز

Knowledge indexيعيش
4Categories
919Threads
2.8Kدعامات
Tutorial

Rust IL2CPP BasePlayer bone matrix extraction using Ghidra & Il2CppDumper

unity_il2cpp_dan
IL2CPP Reverser
MEMBER
مندوب: 46
تاريخ الانضمام: Jun 2020
دعامات: 4
شكرًا: 15
1 months ago · Jun 27, 2026 2:45 AM
#1

To read skeletal bones in Rust Unity IL2CPP:

  1. From BasePlayer, read playerModel at offset 0x4C0.
  2. From PlayerModel, read _multiMesh at offset 0x280.
  3. From SkinnedMultiMesh, read boneTransforms at offset 0x48.
  4. Call Unity's internal Transform::GetPosition(Transform* transform, Vector3* outPos) or read the native bone matrix cache array.

Head bone is indexed at head (boneTransforms[47]), neck is neck (boneTransforms[46]).

rust_recoil_king
Member
MEMBER
مندوب: 190
تاريخ الانضمام: May 2022
دعامات: 5
شكرًا: 48
1 months ago · Jun 27, 2026 5:35 AM
#2

To avoid invoking Unity functions from external, you can traverse the transform hierarchy using pTransform->pTransformData->pMatrices directly!

raycast_ryan
Ballistics Dev
MEMBER
مندوب: 72
تاريخ الانضمام: Sep 2019
دعامات: 32
شكرًا: 16
1 months ago · Jun 27, 2026 11:48 PM
#3

Traversing TransformData matrix array in C++ gives bone world coordinates in 0.05 microseconds. Highly recommended.