Update WIP:3249

Get the path to the executable from HKLM in order to drop the hash verification.
Which is incompatible with native RegistrySearch. D'oh.