diff --git a/Chinese APT/Mustang Panda/README.md b/Chinese APT/Mustang Panda/README.md
index 0a8d292..aa62110 100644
--- a/Chinese APT/Mustang Panda/README.md	
+++ b/Chinese APT/Mustang Panda/README.md	
@@ -84,5 +84,16 @@ To create a payload similar to the ToneShell backdoor and incorporate the functi
 3. 64-bit Compatibility: Ensure that the code is suitable for 64-bit Windows systems.
 
 
+![Screenshot from 2024-09-12 07-57-52](https://github.com/user-attachments/assets/61290a5f-ce8a-4878-b6a7-8d8e6131f558)
 
+ToneShell Backdoor initializes data and dynamically allocates memory for a function pointer (PROPENUMPROCEXW), using it to enumerate window properties. It includes functions for dummy data handling, debug message output, and simulating file archiving with a password (without actual implementation). Key operations include:
 
+  1.Data Handling: Obtains and processes dummy data.
+  
+  2.Memory Management: Allocates memory for executing function pointers.
+  
+  3.Window Enumeration: Uses EnumPropsExW() to list window properties.
+  
+  4.Debugging: Outputs static messages for diagnostics.
+
+    manual compile: x86_64-w64-mingw32-gcc -o ToneShellBackdoor.exe ToneShellBackdoor.c -lwinhttp