当前位置: 首页 > news >正文

Windows Update - Part 2: Update Package - Appendix

Appendix A: IPD-aware package

ref: US 2005/0022175 A1 - Jan 27, 2005

ref: KB 828030 - You Cannot View or Extract the Updated Files from a Windows Product Update Package

image

E.g. WindowsXP-KB824146-x86-ENU.exe.

  SFX module 31,744 bytes (SFXCAB 5.3.18.6), CAB 1,504,547 bytes (append 5 bytes, crc32 0xFFFFFFFF, align to 0x16F600), Authenticode Signature 6,944 bytes.

    _sfx_manifest_ <- _sfx_.dll (mspatcha.dll 5.2.9354.0)

E.g. WindowsServer2003-KB828035-x86-ENU.exe

  SFX module 33,792 bytes (SFXCAB 5.4.1.0), CAB 334,195 bytes, Authenticode Signature 6,760 bytes.

    _sfx_manifest_ <- _sfx_.dll (mspatcha.dll 5.2.3790.83)

Appendix B: Self-Extracting Cabinet

NOTE: CAB-SDK (Cabinet Software Development Kit)

SFXCAB (Self-Extracting Cabinet)

E.g. WindowsXP-KB824105-x86-ENU.exe. ref: 2F0rq9sJ

  SFX module 31,744 bytes (SFXCAB 5.3.18.6), CAB 307,456 bytes, Authenticode Signature 6,944 bytes.

    CAB EXEC: xpsp1hfm.exe (5.3.0018.6) -> update.exe (5.3.0018.6), spuninst.exe (5.3.0018.6) <- update.inf, updater.ver, KBnnn.cat

E.g. Q320206_W2K_SP4_X86_EN.exe.

  SFX module 23,040 bytes (1.16.118.0), CAB 164,884 bytes, Authenticode Signature 6,672 bytes.

    CAB EXEC: update.exe (5.2.0002.2) <- update.inf, updater.ver, Qnnn.cat

E.g. Q315000_WXP_SP1_x86_ENU.exe.

  SFX module 23,040 bytes (1.16.118.0), CAB 568,929 bytes, Authenticode Signature 6,760 bytes.

    CAB EXEC: update.exe (5.1.2600.22) <- update.inf, update.ver, sp1.cat

E.g. Q249599_W2K_SP1_X86_en.EXE.

  SFX module 22,016 bytes (1.10.101.0), CAB 242,438 bytes, Authenticode Signature 5,142 bytes.

    CAB EXEC: hotfix.exe (5.0.2195.1093) <- hotfix.inf

IExpress: WEXTRACT (Win32 Cabinet Self-Extractor)

E.g. 274548USA8.EXE,CAB in .rsrc/RCDATA/CABINET, RUNPROGRAM 274548UP.INF + ADVPACK.DLL.

; RunDll setupx.dll,InstallHinfSection <section> <reboot-mode> <inf-name>
; Advanced INF Package Installer (ADVPACK)
rundll32.exe %s,InstallHinfSection %s 128 %s
rundll32.exe %sadvpack.dll,DelNodeRunDLL32 "%s"

NOTE: IEAK (Internet Explorer Administration Kit)

NOTE: ADVPACK.DLL, SETUPAPI.DLL, SETUPX.DLL.

Appendix C: Installer Engine

  • KB 184305: How to install and remove hotfixes with Hotfix.exe
  • KB 197147: Command-line switches for IExpress software update packages
  • KB 262841: Command-line switches for Windows software update packages
  • KB 814411: Hotfix Packages Do Not Include Debug Symbol Files
  • KB 816915: New File Naming Schema for Microsoft Windows Software Update Packages
    • ProductName-KBArticleNumber-Option-Language.exe, April 2003
  • KB 824687: Command-line switches for Microsoft software update packages
  • KB 902093: How to read the Windowsupdate.log file - 2005
  • KB 934307: Description of the Windows Update Standalone Installer in Windows (wusa.exe)
update.exe
Version 5.1.2600.22 (xpclnt_qfe.010827-1803)Version 5.3.24.3/help, /passive, /quiet, /norestart, /forcerestart, /verbose, /extract
Version 5.4.15.0/forceappsclose, /integrate:path
Version 6.1.22.0/warnrestart, /promptrestart, /nobackup, /overwriteoem, /log

Appendix D: PA19 - PatchAPI

ref: http://msdn.microsoft.com/en-us/library/bb417345.aspx

ref: https://docs.microsoft.com/en-us/windows/win32/devnotes/patchapi

patchapi.h

  Windows Platform SDK, Microsoft Installer SDK

mspatcha.dll

  MS Office 2000, INSTMSI.EXE (1.0.5104.0), mspatcha.dll (1.94.319.0)

  Windows 2000, MSI.DLL (1.10.1029.0), mspatcha.dll (1.94.319.0)

mspatchc.dll

  Windows Installer 1.0 SDK, MsPatchC.dll (1.94.319.0), MsPatchC.lib, MPatch.exe, APatch.exe

  Windows Installer 1.2 SDK, MsPatchC.dll (1.97.324.0), MsPatchC.lib, MPatch.exe (1.94.319.0), APatch.exe (1.94.319.0)

  Windows Server 2003 SP1 Platform SDK, MsPatchC.dll (5.2.3760.0), MsPatchC.lib

Appendix E: PA30 - MSDELTA

ref: http://msdn.microsoft.com/en-us/library/bb417345.aspx

ref: https://docs.microsoft.com/en-us/windows/win32/devnotes/msdelta

ref: Vista

  ref: KB 927374: Microsoft Compression Client Pack 1.0 for Windows XP and Windows Server 2003

msdelta.dll

  • 6.0.6000.16386, 3PQMtVDh
  • 6.0.6001.18000

Note: ApplyDeltaA/W: if the specified delta was created using PatchAPI, and the DELTA_APPLY_FLAG_ALLOW_PA19 flag is set, MSDelta will call PatchAPI to apply the delta.

Resources

  • Every Windows XP “Windows Update” in one download - 2015
  • https://ftp.sunet.se/mirror/archive/ftp.sunet.se/pub/security/vendor/microsoft/
http://www.jsqmd.com/news/53280/

相关文章:

  • Azure app service 和 Azure container app 的对比以及技术选型
  • Nestjs框架: 微服务与分布式架构解析之核心概念、应用场景与技术挑战 - 指南
  • 嗯欧哀批2025有机 - Gon
  • GitPulse:让代码的故事自己讲述
  • 图书馆管理系统Alpha阶段Scrum冲刺博客 Day1
  • 工具-一套键鼠控制两台电脑
  • 企业微信HTTP协议调用,逆向开发,本地化部署
  • 20251127周四日记
  • 【第一周:Python 测试开发核心错题集 避坑指南】
  • 空间够造+花钱够省!红旗HS6霸榜家用大五座混动推荐
  • 搜维尔科技:为什么选择Xsens动作捕捉作为人形机器人解决方案?
  • 题解:P13266 [GCJ 2014 Finals] Symmetric Trees
  • python---深拷贝浅拷贝
  • 解决ARM Linux下使用PlatformIO 找不到编译工具链toolchain报错
  • 搜维尔科技:新一代Xsens Link动作捕捉系统,非常适合实时机器人远程操控、虚拟制作和现场演出录制
  • 解决VirtualBox - Error In supR3HardenedWinReSpawn报错
  • 1127随笔
  • 大规模微服务强大的系统中的雪崩故障防治
  • flutter 生命周期管理:从 Widget 到 State 的完整解析 - 指南
  • gradle的各个环境依赖jar包的同一个版本导致的严重后果
  • 20251127
  • Day26字体图标--上传矢量图
  • 从零开始:用Python和Gemini 3四步搭建你自己的AI Agent
  • 双特异性抗体:抗癌 “双面手”,两种模式精准杀伤癌细胞
  • 机器翻译模型跨领域自适应技术解析
  • 高级程序语言第七次作业
  • windows和linux下jar包graalvm打包生native程序 - yebinghuai-qq
  • 2025.11.27
  • 赋能第一期 新员工角色转换主题培训
  • 从技术管理者到战略决策者,揭秘IT技术负责人的四个价值层次,看看您在第几层?