I have a malware which is checking for keyboard type and locale information.After that, it creates a service with BinaryPathName as malware's exe address. After creating a service, malware starts it and call StartServiceCtrlDispatcher and kinda stucks there. No further code is evaluated after that.I have done all this analysis in OllyDbg and ImmDbg.I want to debug a ServiceMain Function of the service installed by this malware.After googling a lot, I have found this article. I tried performing the 2nd method Configure a service to start with the WinDbg debugger attached but somehow my VM got freeze.So my question (in general), How can I debug ServiceMain function of any service?
How to debug ServiceMain function of a service?
windows;ollydbg;windbg;winapi