Hello Laopux,
I think somebody mentioned earlier the same problem and the solution was to copy the extracted installation from elsewhere (e.g. to default C:\Program Files\MD). I am attaching a link to ZIP file with my backed up installation, you may try it.
Just in case, I have also uploaded the ZIP to VirusTotal and it reads clean.
For others, there is an extra CPS2_extra_menus.exe, with restored missing menus which allows to modify some other hidden settings, but it requires passwords (for test/online test menus it is the same 8-digit password starting with 6666 as in the radio when powered with side down button, for Embedded menu, it is 6 numbers starting 374, both can be found as string in CPS.EXE file). It can be used to fix missing Chinese fonts (+voice) in 2.2.019 FW through embedded menu - they are stored in flash but their offsets have changed, that is why they were broken there - but for the Power on picture extracted from older firmware (On2) it does not seem to help and the screen is still blank during startup.