Add initial support for service monitoring -- this works fine at least for non-hosted services, where services.exe itself performs a CreateProcess.  Tested successfully against the Sony wiper malware.  Future commits will clean up the display and give special instruction to cuckoomon so that it only logs useful APIs in the context of services.exe.