Analysis find if registry key path has quotes

Does anyone know what relevance (creating an analysis) needed to verify if the following path:

ImagePath REG_EXPAND_SZ C:\Program Files\Evolis Card Printer\Evolis Premium Suite\EvoPCSvc.exe

in “HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Evolis Print Center Service” has quotes or not:

ImagePath REG_EXPAND_SZ “C:\Program Files\Evolis Card Printer\Evolis Premium Suite\EvoPCSvc.exe”

Please see the following for an example for the BESClient service (including steps and comments along the way to try to ‘show work’ :slight_smile: ):

// sample string with a double quote (percent-code 22)
Q: “abc%22123”
A: abc"123
I: singular string

// checking if the string contains a double quote (percent-code 22)
Q: “abc%22123” contains “%22”
A: True
I: singular boolean

// returning the value for a specific imagepath in the registry:
Q: value “ImagePath” of key “HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BESClient” of registry
A: “C:\Program Files (x86)\BigFix Enterprise\BES Client\BESClient.exe”%00
I: singular registry key value

// casting the registry value to a string
Q: value “ImagePath” of key “HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BESClient” of registry as string
A: “C:\Program Files (x86)\BigFix Enterprise\BES Client\BESClient.exe”%00
I: singular string

// checking if the imagepath contains a double quote
Q: value “ImagePath” of key “HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BESClient” of registry as string contains “%22”
A: True
I: singular boolean