More writes to kernel64x.dll by cisvc.exe