Search notes:

Service Control Manager (services.exe)

The Service Control Manager (SCM)
The SCM itself is started when Windows is started.
The database of services is stored in the registry under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services.
SCM is pronounced as SCUM.
The SCM is an RPC Server.

The SCM executable

The SCM is implemented by the services.exe executable.
services.exe is started by wininit.exe.

SvcCtrlMain()

SvcCtrlMain() is the SCM's entry point.

Communication with the Service Control Manager

Windows provides (at least) two tools to communicate with the Service Control Manager:

See also

The start value under the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\driverName.
The client-side APIs of the SCM are implemented in advapi32.dll.

Index