In windows 7 there is a new Reg call that we need to...

sandbox/src/registry_interception.h

Index: sandbox/src/registry_interception.h
===================================================================
--- sandbox/src/registry_interception.h	(revision 9582)
+++ sandbox/src/registry_interception.h	(working copy)
@@ -25,6 +25,12 @@
     NtOpenKeyFunction orig_OpenKey, PHANDLE key, ACCESS_MASK desired_access,
     POBJECT_ATTRIBUTES object_attributes);
 
+// Interception of NtOpenKeyEx on the child process.
+// It should never be called directly
+SANDBOX_INTERCEPT NTSTATUS WINAPI TargetNtOpenKeyEx(
+    NtOpenKeyExFunction orig_OpenKeyEx, PHANDLE key, ACCESS_MASK desired_access,
+    POBJECT_ATTRIBUTES object_attributes, DWORD unknown);
+
 }  // extern "C"
 
 }  // namespace sandbox