Skip to content

[BUG] Skin Stealer Memory Violation Crash #645

Description

@Shardzzexe

Checklist

  • I have checked the FAQ

  • I have searched the issues of this repository and believe that this is not a duplicate

Bug description

After enabling the Skin Stealer module in Flarial client for Minecraft GDK 1.26.21 with WinRT support, nothing happens but when you try to steal someone's skin, the client crashes with

Expected behavior

I have expected the Skin Stealer module to equip and save a skin file locally at %localappdata%\Flarial\Client\Skins\ which allows me to put on other players' skins with a simple keybind after looking at the player.

Actual behavior

When launching the client for Minecraft GDK 1.26.21 with WinRT support - it launches fine and logs these debug messages:

[DEBUG] GDK Secure (Store)
Client Version: 2.00
Game Version: 1.26.21
Commit: aae71ba
Build Type: Release
Build Date: 2026-05-22 11:51:31

Later, after the client is running, it fails to load a few offsets and signatures for internal game functions:
[Signatures] Failed to find signature: MinecraftGame::onAppSuspended
[Signatures] Failed to find signature: ActorShaderManager::setupShad[Signatures] Failed to find signature: idk
nerScreenController::_handleAutoPlace
[Signatures] Failed to find signature: ContainerScreenController::_onContainerSlotHovered
[Signatures] Failed to find signature: VanillaClientInputMappingFactory::_bindActionToKeyboardAndMouseInput
[Signatures] Failed to find signature: LevelChunk::getBrightness
[Signatures] Failed to find signature: SoundEngine::play
[Signatures] Failed to find signature: bgfx::rendercontextd3d11::submit
[Signatures] Failed to find signature: AppPlatform::readAssetFile
[Signatures] Failed to find signature: Mob::getCurrentSwingDuration
[Signatures] Failed to find signature: Actor::drop
[Signatures] Failed to find signature: HudScreenController::tick
[Signatures] Failed to find signature: ContainerScreenController::_handleTakeAll
[Signatures] Failed to find signature: ContainerScreenController::_handleSwap
[Signatures] Failed to find signature: MinecraftGame::onDeviceLost
[Signatures] Failed to find signature: ContainerScreenController::_onHotbarSlotHotkeyUsed
[Signatures] Failed to find signature: DeferredFrameRenderer::update
[Signatures] Failed to find signature: bgfx::s_ctx
[Signatures] Failed to find signature: ClientSkinSystem::createOrUpdate
[Signatures] Failed to find signature: LightContainer::updateLight
[Signatures] Failed to find signature: BlockSource::getLightColor
[Signatures] Failed to find signature: HoverRenderer::_renderHoverBox
[Signatures] Failed to find signature: ItemStack::_loadItem
[Signatures] Failed to find signature: renderGuiItemNew::armorGate
[Signatures] Failed to find signature: ShulkerBoxBlockItem::appendFormattedHovertext
[Signatures] Failed to find signature: BoneOrientation::computeBoneTransform
[Signatures] Failed to find signature: ServiceLocator::cleanup
[Signatures] Failed to find signature: LightContainer::removeLight
[Signatures] Failed to find signature: ItemRenderer::renderItemGroup
[Signatures] Failed to find signature: BedrockLog::LogDetails::_log_va

There may be two causes to this access violation.
1 - The signature for ClientSkinSystem::createOrUpdate was not found, which can cause a crash when the client tries to access it.
2 - The DirectX Swapchain hook has failed somewhere.

From my understanding, I believe that option 2 is probably the cause of the crash due to these debug messages at the end of the crash log:

[vFunc Hook] Hooked drawText at 0x7ff69bbd3e20
[vFunc Hook] Hooked DrawImage at 0x7ff69bbd55e0
[DEBUG] [Swapchain] API match confirmed: kiero and runtime both agree on DX12
[DEBUG] [Swapchain] Triggering swapchain recreation via ResizeBuffers
[DEBUG] TabList: Resetting descriptor state - clearing 0 descriptors
[DEBUG] TabList: Descriptor state reset complete
[DEBUG] Queue value: true
[DEBUG] Initializing for DX12
[SUCCESS] [Swapchain] Better Frames: Calling RemoveDevice() to force DX11 fallback
[DEBUG] [Swapchain] CreateSwapChainForHwnd succeeded (isDX12=false)
[DEBUG] [Swapchain] Phase 2: Present already hooked at live swapchain address (no mismatch)
[DEBUG] [ResizeHook] Phase 2: ResizeBuffers already hooked at live address (no mismatch)
[SUCCESS] [Swapchain] Better Frames: Game recreated swapchain with DX11!
[DEBUG] [ResizeHook] Re-hooking ResizeBuffers for DX11 at vtable index 13
[vFunc Hook] Failed to hook ResizeBuffers_DX11
[SUCCESS] [ResizeHook] Successfully re-hooked ResizeBuffers for DX11
[DEBUG] Initializing for DX11
[DEBUG] initializing motion blur helper..
[DEBUG] Initializing motion blur helper with WVP matrices...
[DEBUG] [MotionBlur] Initialized: avgPixel=true, real=true, initted=true
[DEBUG] [UnderUIHooks] Re-hooking for DX11 after Better Frames fallback
[vFunc Hook] Queued ClearDepthStencilViewDX11_Rehook at 0x7ffa9c143b70
[vFunc Hook] Queued ClearRenderTargetViewDX11_Rehook at 0x7ffa9c08e890
[vFunc Hook] Bgfx_d3d11_submit_hook_Rehook has invalid address

The message I am most interested about is this:
"[vFunc Hook] Bgfx_d3d11_submit_hook_Rehook has invalid address"

I am, also, assuming that this version of Flarial client is new and being tested.

Furthermore, the hitbox module does not render either; however, I don't have any logs that could help with this issue.

For more information, view the attached crash report file.

latest_2026-05-23-11-56-16.log

Steps to reproduce

  1. Launch the client using the Flarial launcher.
  2. Join a game. (e.g. Hive Network)
  3. Press the hotkey to open the Flarial ClickGui. (mine is K)
  4. Search modules for "Skin".
  5. Enable the module and set a keybind to steal a skin.
  6. Move to a player and look at them, then press that keybind you pressed earlier.
  7. The client will show a MessageBox telling you about the crash and in my case it was an Access Violation.

Operating System

Windows 11

OS Version

Windows Type - Windows 11 Home
Version - 23H2
OS Build - 22631.6199

Additional notes

Here is a screenshot for the crash info inside the MessageBox:

(Screenshot)[https://github.com/user-attachments/assets/9e8f8ddf-4943-49f2-bcd8-c04acbf1fa5a]

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions