I’m a little confused as to why you are using so much IF/THEN/ELSE. If you use plural relevance, you don’t need that, even if you do expand the property later.
Also, I find your relevance hard to follow. I’m not certain it all works correctly.
Also, could you provide the link to the original forum post for this relevance?
Is this example like this one: SOLVED: Adding LF/CR To Long String In Property ?
If so, it would be something like this:
exists (hexadecimal strings it) whose(it contains "StringValue2" OR it contains "StringValue1") of unique values of (it as string) of values "AccessProtectionUserRules" of keys "HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\BehaviourBlocking" of (x64 registries; x32 registries)
If you wanted to assert both, then you could do this:
2 <= number of (hexadecimal strings it) whose(it contains "StringValue2" OR it contains "StringValue1") of unique values of (it as string) of values "AccessProtectionUserRules" of keys "HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\BehaviourBlocking" of (x64 registries; x32 registries)