Handles for services are retrieved from the service manager port, "srv:". Services are an abstraction of ports, they operate the same way except regular ports can have their handles retrieved directly from a SVC(svcConnectToPort).
Processes with PID less than or equal to the number of NATIVE_FIRM built-in modules (fs, sm, pm, pxi, ldr) have access to all services.
Service Manager Port "srv:"
| Command Header | Description |
|---|---|
| 0x00010002 | Initialize |
| 0x00020000 | GetProcSemaphore (the handle from this gets signaled when notifications for this process gets triggered) |
| 0x00030100 | RegisterService (8-byte servicename, u32 strlen, u32 flags?) |
| 0x000400C0 | UnregisterService (8-byte servicename, u32 strlen) |
| 0x00050100 | GetServiceHandle (same input as RegisterService) |
| 0x000600c2 | RegisterHandle? (8-byte servicename, u32 strlen,Handel h) |
| 0x0007.... | UnregisterHandle? (same input as UnregisterService) |
| 0x0008.... | ishandlepresent (8-byte servicename, u32 strlen,u32 flags) if flag is set it returns the handle? |
| 0x00090040 | IsRegistered This enables the specified notificationID for the current process. |
| 0x000A.... | This disable the specified notificationID for the current process (u32 ID) |
| 0x000B0000 | This returns the notificationID which was triggered, if any(see GetProcSemaphore). |
| 0x000C.... | ?fire notificationID (u32 ID,u32 flag) (Bit(0) only fire if not already fired,Bit(1) = return error if error happen else it always returns 0) |
| 0x000D.... | ? |
| 0x000E.... | returns 1 if the service is registered. 0 if not (8-byte servicename, u32 strlen) |
Service Manager Process-Manager Port "srv:pm"
| Command Header, prior to 7.0.0-13 | Description |
|---|---|
| 0x04030082 | (u32 procid, u32 wordsz, ((wordsz<<16) | 2), serviceaccesscontrol*) Register. |
| 0x04040040 | (u32 procid) Unregister. |
The Register command registers a process with the service-manager, which includes registering the serviceaccesscontrol for the process which normally originates from the exheader.
Prior to to 7.0.0-13, the commands listed for "srv:" were also accessible under this port with the same command-headers. Starting with 7.0.0-13, the "srv:pm" port was changed to a service. With this change, commandIDs for these commands were changed. "srv:pm" was originally vulnerable, this was fixed with 7.0.0-13, see here. Originally any process could use "srv:pm", however starting with 7.0.0-13 only the built-in NATIVE_FIRM sysmodules have access to it. The only system title which uses "srv:pm" is the Process Manager.
Notifications
| ID | Description |
|---|---|
| 0x100 | This indicates that all processes must terminate: power-off, reboot, or FIRM-launch. |
| 0x204 | This indicates that the HOME button was pressed. |