thanks for answer ,there is test vid.
and it shut down again.
http://www4.zippyshare.com/v/C60kDjdp/file.html
and post info from this app
------------------------------
04.09.2017 21:51:38
Exception: C0000005
regEax 00000000
regEcx FFFFFFFF
regEdx 00000000
regEbx 00000400
regEsp 04E2EB90
regEbp 04E2EF84
regEsi FFFFFFFF
regEdi 00566550
regEip 73FCF748
BaseAddress: 73FCF000
AllocationBase: 73EE0000
-------------------------------
Exception Address: 73FCF748
-------------------------------
Exception occurs into module KERNELBASE.dll
Next API Address & Name above before Exception: 73FCF610 CompareStringA
73FCF610 MOV EDI , EDI
73FCF612 PUSH EBP
73FCF613 MOV EBP , ESP
73FCF615 AND ESP , F8H
73FCF618 SUB ESP , 000003E4H
73FCF61E MOV EAX , DWORD PTR [74074BC0H]
73FCF623 XOR EAX , ESP
73FCF625 MOV DWORD PTR [ESP+000003E0H] , EAX
73FCF62C MOV EDX , DWORD PTR [EBP+0CH]
73FCF62F MOV ECX , DWORD PTR [EBP+10H]
73FCF632 PUSH EBX
73FCF633 MOV EBX , DWORD PTR [EBP+08H]
73FCF636 PUSH ESI
73FCF637 MOV ESI , DWORD PTR [EBP+14H]
73FCF63A MOV DWORD PTR [ESP+38H] , EDX
73FCF63E MOV DWORD PTR [ESP+14H] , ECX
73FCF642 PUSH EDI
73FCF643 MOV EDI , DWORD PTR [EBP+18H]
73FCF646 MOV DWORD PTR [ESP+20H] , EDI
73FCF64A TEST ESI , ESI
73FCF64C JNS 73FCFAE0H
73FCF652 MOV EAX , DWORD PTR [EBP+1CH]
73FCF655 TEST EAX , EAX
73FCF657 JNS 73FCFAE0H
73FCF65D MOV DWORD PTR [ESP+34H] , 00000001H
73FCF665 XOR EAX , EAX
73FCF667 MOV DWORD PTR [ESP+0CH] , EAX
73FCF66B MOV DWORD PTR [ESP+10H] , EAX
73FCF66F TEST EDX , 60000000H
73FCF675 JNE 73FCFB6DH
73FCF67B CMP EBX , 00000401H
73FCF681 JC 73FCFAB3H
73FCF687 CMP EBX , 00000800H
73FCF68D JNC 73FCFAB3H
73FCF693 CMP DWORD PTR [74076848H] , 00H
73FCF69A JE 73FCFBA6H
73FCF6A0 MOV EAX , DWORD PTR [74076848H]
73FCF6A5 CMP EBX , DWORD PTR [EAX]
73FCF6A7 JNE 740173C3H
73FCF6AD TEST EAX , EAX
73FCF6AF JE 740173C3H
73FCF6B5 MOV EAX , DWORD PTR [EAX+10H]
73FCF6B8 MOVZX EDI , WORD PTR [EAX+6EH]
73FCF6BC TEST EDI , EDI
73FCF6BE JE 74017404H
73FCF6C4 MOV DWORD PTR [ESP+24H] , 00000000H
73FCF6CC MOV DWORD PTR [ESP+1CH] , 00000000H
73FCF6D4 MOV DWORD PTR [ESP+30H] , 00000000H
73FCF6DC CMP EDI , 0000CAEDH
73FCF6E2 JE 74017413H
73FCF6E8 CMP EDI , 000096C6H
73FCF6EE JE 7401741DH
73FCF6F4 CMP EDI , 03H
73FCF6F7 JE 74017427H
73FCF6FD CMP EDI , DWORD PTR [7407673CH]
73FCF703 JNE 7401745BH
73FCF709 MOV EDX , DWORD PTR [7407698CH]
73FCF70F MOV DWORD PTR [ESP+0CH] , EDX
73FCF748 MOV AL , BYTE PTR [ECX]
73FCF74A INC ECX
73FCF74B TEST AL , AL
73FCF74D JNE 73FCF748H
73FCF74F SUB ECX , EDX
------------------------------
------------------------------
04.09.2017 21:52:40
Exception: C0000005
regEax 00000000
regEcx 00000014
regEdx 00000000
regEbx 023C0000
regEsp 053AEE18
regEbp 053AFF80
regEsi 053B0000
regEdi 053AFD5C
regEip 0040FD9F
BaseAddress: 0040F000
AllocationBase: 00400000
-------------------------------
Exception Address: 0040FD9F
-------------------------------
0040FD9F REP MOVSB
0040FDA1 PUSH DWORD PTR [EBP-0000022CH]
0040FDA7 LEA EAX , DWORD PTR [EBP-000003AAH]
0040FDAD PUSH EAX
0040FDAE CALL 0045108CH
0040FDB3 CMP DWORD PTR [005787B4H] , 01H
0040FDBA JE 0040FDDDH
0040FDBC PUSH 0057D352H
0040FDC1 PUSH 00000101H
0040FDC6 CALL 00451F32H
0040FDCB OR EAX , EAX
0040FDCD JNE 00411DA3H
0040FDD3 MOV DWORD PTR [005787B4H] , 00000001H
0040FDDD CALL 0046AE26H
0040FDE2 OR EAX , EAX
0040FDE4 JE 00411D7EH
0040FDEA MOV DWORD PTR [EBP-04H] , EAX
0040FDED PUSH DWORD PTR [EBP-04H]
0040FDF0 CALL 0046AE56H
0040FDF5 ADD ESP , 04H
------------------------------