vbox_sysfile1() rewritten to avoid userland hooking (target : XP SP3)