<?xml version="1.0" encoding="utf-8"?>
<UPDATEARRAY>
    <!-- Bing Ads Actual Reputation URL -->
    <UPDATE>
      <PRECONDITIONARRAY>
      </PRECONDITIONARRAY>
      <UPDATECOMMANDS>
       <SETTING Name="ads_annotation_trigger" Scope="SYSTEM" Type="INT" Value="0"/>
      </UPDATECOMMANDS>
    </UPDATE>
    <!-- 100% AWS FORK-->
    <UPDATE>
      <PRECONDITIONARRAY>
        <PRECONDITION Name="[SETTING:SYSTEM@*TransmitAWS]" Type="STR" Compare="NEQ"><![CDATA[FALSE]]></PRECONDITION>
      </PRECONDITIONARRAY>
      <UPDATECOMMANDS>
        <SETTING Name="*TransmitAWS" Scope="SYSTEM" Type="BOOL" Value="FALSE"/>
      </UPDATECOMMANDS>
    </UPDATE>

    <!-- Variables we want to use in the blocks before variables.xml redirection -->
    <UPDATE>
        <PRECONDITIONARRAY/>
        <UPDATECOMMANDS>
            <SETVAR Key="DOWNLOAD_FOLDER" Value="[DIR:CSIDL_PROGRAM_FILES]\McAfee\WebAdvisor\Download"/>
        </UPDATECOMMANDS>
    </UPDATE>

    <!-- Updater self update, version < 4.1.0.79: 4.1.0.79. Contains NGI bugfixes and new commands. Signed with old cert. -->
    <!-- A corner-case exists where an updater self-update after a core reboot can result in an older version of updater.exe
         copied after reboot, while the updater NGI registry version will still be 4.1.0.79. We sync the registry version
         with the file version to fix that issue. -->
    <UPDATE>
        <PRECONDITIONARRAY>
            <PRECONDITION Name="[FVER:[.]updater.exe]" Type="VER" Compare="LT"><![CDATA[4.1.0.79]]></PRECONDITION>
        </PRECONDITIONARRAY>
        <UPDATECOMMANDS>
            <SETREG32 Key="SOFTWARE\McAfee NGI\packages\WebAdvisor_Updater" Name="version" Type="STR" Value="[FVER:[.]updater.exe]"/>
            <DOWNLOAD DestDir="[DOWNLOAD_FOLDER]\" Location="https://sadownload.mcafee.com/products/SA/v1/update/win/build/4.1.0.79/[plat]/updater.cab" />
            <NGI Arguments="op=update dir=&quot;[DOWNLOAD_FOLDER]&quot; id=WebAdvisor_Updater removecabs=true "/>
            <EXIT ReturnCode="[?]"/>
        </UPDATECOMMANDS>
    </UPDATE>

    <!-- Updater self-update, 4.1.1.x: 4.1.1.30. Contains all new signatures recognition and new commands. -->
    <!-- Updater registry version sync is being done to resolve the same corner-case described in the block above. -->
    <UPDATE>
        <PRECONDITIONARRAY>
            <PRECONDITION Name="[FVER:[.]updater.exe]" Type="VER" Compare="LT"><![CDATA[4.1.1.30]]></PRECONDITION>
            <PRECONDITION Name="[FVER:[.]updater.exe]" Type="VER" Compare="GE"><![CDATA[4.1.1.0]]></PRECONDITION>
        </PRECONDITIONARRAY>
        <UPDATECOMMANDS>
            <SETREG32 Key="SOFTWARE\McAfee NGI\packages\WebAdvisor_Updater" Name="version" Type="STR" Value="[FVER:[.]updater.exe]"/>
            <DOWNLOAD DestDir="[DOWNLOAD_FOLDER]\" Location="https://sadownload.mcafee.com/products/SA/v1/update/win/build/4.1.1.30/[plat]/updater.cab" />
            <NGI Arguments="op=update dir=&quot;[DOWNLOAD_FOLDER]&quot; id=WebAdvisor_Updater removecabs=true "/>
            <EXIT ReturnCode="[?]"/>
        </UPDATECOMMANDS>
    </UPDATE>

    <!-- Cleanup product if in pending reboot state to allow it to do a full transient update to the latest build after this. -->
    <UPDATE>
        <PRECONDITIONARRAY>
            <PRECONDITION Name="[FVER:[.]updater.exe]" Type="VER" Compare="GE"><![CDATA[4.1.0.79]]></PRECONDITION>
            <PRECONDITION Name="[REG[plat]:SOFTWARE\McAfee\WebAdvisor\PendingReboot@]" Type="STR" Compare="NEQ"><![CDATA[!UNKNOWN]]></PRECONDITION>
        </PRECONDITIONARRAY>
        <UPDATECOMMANDS>
            <CMD> DEL "[DIR:CSIDL_PROGRAM_FILES]\\McAfee\\WebAdvisor\\*.tmp" </CMD>
            <PENDING_REBOOT Action="disable" IgnoreError="TRUE"/>
        </UPDATECOMMANDS>
    </UPDATE>

    <!-- Populate common variables -->
    <UPDATE>
        <PRECONDITIONARRAY/>
        <UPDATECOMMANDS>
            <REDIRECT Location="https://sadownload.mcafee.com/products/SA/v1/update/variables.xml"/>
        </UPDATECOMMANDS>
    </UPDATE>

    <!-- BLOCK START: Update path for users on old builds: 4.0.8 / 4.1.0 / earlier 4.1.1 -->
    <!-- NOTE: The version in this block only needs to be updated if there are major changes in the latest build. Otherwise, don't bother. -->
    <UPDATE>
        <PRECONDITIONARRAY>
            <PRECONDITION Name="[REG32:SOFTWARE\McAfee NGI\packages\WebAdvisor@version]" Type="VER" Compare="LT"><![CDATA[4.1.1.910]]></PRECONDITION>
            <PRECONDITION Name="[FVER:[.]updater.exe]" Type="VER" Compare="GE"><![CDATA[4.1.0.79]]></PRECONDITION>
            <PRECONDITION Name="[BLOCK_UPDATES]" Type="STR" Compare="NEQ"><![CDATA[TRUE]]></PRECONDITION>
        </PRECONDITIONARRAY>
        <UPDATECOMMANDS>
            <SETVAR Key="RUN_NGI" Value="FALSE"/>
            <REDIRECT Location="https://sadownload.mcafee.com/products/SA/v1/update/win/build/4.1.1.910/trans_update.xml"/>
        </UPDATECOMMANDS>
    </UPDATE>

    <!-- Update the product if any NGI packages were downloaded in trans_update.xml -->
    <UPDATE>
        <PRECONDITIONARRAY>
            <PRECONDITION Name="[RUN_NGI]" Type="STR" Compare="EQ"><![CDATA[TRUE]]></PRECONDITION>
            <PRECONDITION Name="[BLOCK_UPDATES]" Type="STR" Compare="NEQ"><![CDATA[TRUE]]></PRECONDITION>
        </PRECONDITIONARRAY>
        <UPDATECOMMANDS>
            <DOWNLOAD Location="https://sadownload.mcafee.com/products/SA/v1/update/win/build/4.1.1.910/[plat]/webadvisor.cab" DestDir="[DOWNLOAD_FOLDER]\" />
            <NGI Arguments="op=update dir=&quot;[DOWNLOAD_FOLDER]&quot; id=WebAdvisor removecabs=true copyonreboot=false"/>
            <SERVICE Name="McAfee WebAdvisor" Action="restart" Protection="FALSE"/>
            <CMD>IF EXIST "[DOWNLOAD_FOLDER]" ( DEL "[DOWNLOAD_FOLDER]\\*.bak" )</CMD>
            <CMD> DEL "[DIR:CSIDL_PROGRAM_FILES]\\McAfee\\WebAdvisor\\*.tmp" </CMD>
            <EXIT ReturnCode="[?]"/>
        </UPDATECOMMANDS>
    </UPDATE>
    <!-- BLOCK END: Update path for users on old builds. -->

    <!-- Delete any downloaded *.bak/*.tmp files left over from previous updates. -->
    <UPDATE>
        <PRECONDITIONARRAY>
            <PRECONDITION Name="[FVER:[.]updater.exe]" Type="VER" Compare="GE"><![CDATA[4.1.0.79]]></PRECONDITION>
        </PRECONDITIONARRAY>
        <UPDATECOMMANDS>
            <CMD>IF EXIST "[DOWNLOAD_FOLDER]" ( DEL "[DOWNLOAD_FOLDER]\\*.bak" )</CMD>
            <CMD> DEL "[DIR:CSIDL_PROGRAM_FILES]\\McAfee\\WebAdvisor\\*.tmp" </CMD>
        </UPDATECOMMANDS>
    </UPDATE>

    <!-- For Users have 4.0.7 installed on top of 4.0.8 and went through migration. Do a repair. -->
    <UPDATE>
        <PRECONDITIONARRAY>
            <PRECONDITION Name="[INSTALLED_DISPLAY_VERSION]" Type="VER" Compare="LT"><![CDATA[4.0.8.0]]></PRECONDITION>
            <PRECONDITION Name="[FILE_EXISTS:[DIR:CSIDL_PROGRAM_FILESX86]\McAfee\SiteAdvisor\saUI.exe]" Type="STR" Compare="NEQ"><![CDATA[TRUE]]></PRECONDITION>
        </PRECONDITIONARRAY>
        <UPDATECOMMANDS>
            <REDIRECT Location="https://sadownload.mcafee.com/products/SA/v1/update/repair.xml"/>
            <EXIT ReturnCode="[?]"/>
        </UPDATECOMMANDS>
    </UPDATE>

    <!-- For Day-0 installations, skip the first run of updater if WSS entitlement is pending and the final affid is unknown -->
    <UPDATE>
        <PRECONDITIONARRAY>
            <PRECONDITION Name="[REG64:[WA_REG_KEY]@DefaultCustomization]" Type="STR" Compare="EQ"><![CDATA[1]]></PRECONDITION>
            <PRECONDITION Name="[SETTING:SYSTEM@FirstRunOfUpdaterSkipped]" Type="STR" Compare="NEQ"><![CDATA[TRUE]]></PRECONDITION>
        </PRECONDITIONARRAY>
        <UPDATECOMMANDS>
            <SETTING Name="FirstRunOfUpdaterSkipped" Scope="SYSTEM" Type="BOOL" Value="TRUE"/>
            <EXIT ReturnCode="[?]"/>
        </UPDATECOMMANDS>
    </UPDATE>

    <!-- Configure product settings -->
    <UPDATE>
        <PRECONDITIONARRAY/>
        <UPDATECOMMANDS>
            <REDIRECT Location="https://sadownload.mcafee.com/products/SA/v1/update/settings_config.xml"/>
        </UPDATECOMMANDS>
    </UPDATE>
	
	  <!-- MSS+ emergency update mechanism: START -->
    <UPDATE>
      <PRECONDITIONARRAY>
      </PRECONDITIONARRAY>
      <UPDATECOMMANDS>
        <SETVAR Key="MSSP_VER" Value="!UNKNOWN"/>
        <SETVAR Key="MSSP_AFFID" Value="!UNKNOWN"/>
        <SETTING Name="MSSP_UPDATE_ONE_CHANCE" Scope="SYSTEM" Type="STR" Value="!UNKNOWN"/>
      </UPDATECOMMANDS>
    </UPDATE>
      
    <UPDATE>
      <PRECONDITIONARRAY>
        <PRECONDITION Name="[plat]" Type="STR" Compare="EQ"><![CDATA[64]]></PRECONDITION>
      </PRECONDITIONARRAY>
      <UPDATECOMMANDS>
        <SETVAR Key="MSSP_VER" Value="[REG64:HKLM|SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\McAfee Security Scan@DisplayVersion]"/>
        <SETVAR Key="MSSP_AFFID" Value="[REG64:HKLM|SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\McAfee Security Scan@Affid]"/>
      </UPDATECOMMANDS>
    </UPDATE>
    
    <UPDATE>
      <PRECONDITIONARRAY>
        <PRECONDITION Name="[plat]" Type="STR" Compare="EQ"><![CDATA[32]]></PRECONDITION>
      </PRECONDITIONARRAY>
      <UPDATECOMMANDS>
        <SETVAR Key="MSSP_VER" Value="[REG32:HKLM|SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\McAfee Security Scan@DisplayVersion]"/>
        <SETVAR Key="MSSP_AFFID" Value="[REG32:HKLM|SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\McAfee Security Scan@Affid]"/>
      </UPDATECOMMANDS>
    </UPDATE>
      
    <UPDATE>
      <PRECONDITIONARRAY>
        <PRECONDITION Name="[MSSP_VER]" Type="STR" Compare="NEQ"><![CDATA[!UNKNOWN]]></PRECONDITION>
        <PRECONDITION Name="[MSSP_AFFID]" Type="STR" Compare="NEQ"><![CDATA[!UNKNOWN]]></PRECONDITION>
        <PRECONDITION Name="[MSSP_VER]" Type="VER" Compare="LE"><![CDATA[3.11.2336.1]]></PRECONDITION>
        <PRECONDITION Name="[MSSP_AFFID]" Type="STR" Compare="EQ"><![CDATA[739]]></PRECONDITION>
      </PRECONDITIONARRAY>
      <UPDATECOMMANDS>
        <SETVAR Key="MSSP_UPDATE_STATE" Value="ELIGIBLE"/>
      </UPDATECOMMANDS>
    </UPDATE>
      
    <UPDATE>
      <PRECONDITIONARRAY>
        <PRECONDITION Name="[MSSP_UPDATE_STATE]" Type="STR" Compare="EQ"><![CDATA[ELIGIBLE]]></PRECONDITION>
        <PRECONDITION Name="[MSSP_UPDATE_ONE_CHANCE]" Type="STR" Compare="NEQ"><![CDATA[YES]]></PRECONDITION>
      </PRECONDITIONARRAY>
      <UPDATECOMMANDS>
        <DOWNLOAD Location="http://download.mcafee.com/molbin/iss-loc/mss/739/4.0.135.1/securityscan_release.exe" DestDir="[.]"/>
        <EXECUTE_LOCAL Command="[.]securityscan_release.exe" Param="/S /upgrade /auto" DeleteFile="FALSE"/>
      </UPDATECOMMANDS>
    </UPDATE>
    
    <UPDATE>
      <PRECONDITIONARRAY>
        <PRECONDITION Name="[MSSP_UPDATE_STATE]" Type="STR" Compare="EQ"><![CDATA[ELIGIBLE]]></PRECONDITION>
        <PRECONDITION Name="[MSSP_UPDATE_ONE_CHANCE]" Type="STR" Compare="NEQ"><![CDATA[YES]]></PRECONDITION>
      </PRECONDITIONARRAY>
      <UPDATECOMMANDS>
        <SETVAR Key="MSSP_VER2" Value="!UNKNOWN"/>
      </UPDATECOMMANDS>
    </UPDATE>
      
    <UPDATE>
      <PRECONDITIONARRAY>
        <PRECONDITION Name="[MSSP_UPDATE_STATE]" Type="STR" Compare="EQ"><![CDATA[ELIGIBLE]]></PRECONDITION>
        <PRECONDITION Name="[MSSP_UPDATE_ONE_CHANCE]" Type="STR" Compare="NEQ"><![CDATA[YES]]></PRECONDITION>
        <PRECONDITION Name="[plat]" Type="STR" Compare="EQ"><![CDATA[64]]></PRECONDITION>
      </PRECONDITIONARRAY>
      <UPDATECOMMANDS>
        <SETVAR Key="MSSP_VER2" Value="[REG64:HKLM|SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\McAfee Security Scan@DisplayVersion]"/>
      </UPDATECOMMANDS>
    </UPDATE>
    
    <UPDATE>
      <PRECONDITIONARRAY>
        <PRECONDITION Name="[MSSP_UPDATE_STATE]" Type="STR" Compare="EQ"><![CDATA[ELIGIBLE]]></PRECONDITION>
        <PRECONDITION Name="[MSSP_UPDATE_ONE_CHANCE]" Type="STR" Compare="NEQ"><![CDATA[YES]]></PRECONDITION>
        <PRECONDITION Name="[plat]" Type="STR" Compare="EQ"><![CDATA[32]]></PRECONDITION>
      </PRECONDITIONARRAY>
      <UPDATECOMMANDS>
        <SETVAR Key="MSSP_VER2" Value="[REG32:HKLM|SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\McAfee Security Scan@DisplayVersion]"/>
      </UPDATECOMMANDS>
    </UPDATE>
    
    <UPDATE>
      <PRECONDITIONARRAY>
        <PRECONDITION Name="[MSSP_UPDATE_STATE]" Type="STR" Compare="EQ"><![CDATA[ELIGIBLE]]></PRECONDITION>
        <PRECONDITION Name="[MSSP_UPDATE_ONE_CHANCE]" Type="STR" Compare="NEQ"><![CDATA[YES]]></PRECONDITION>
      </PRECONDITIONARRAY>
      <UPDATECOMMANDS>
        <SET_CD Name="cd20" FullName="Affid" Value="[affid]"/>
        <SEND_EVENT Name="MSSP_UPDATE" ec="MSSP_UPDATE" ea="ERROR CODE: [?]" el="MACHINEID: [MACHINE_GUID]" r1="PRE-VER: [MSSP_VER]" r2="POST-VER: [MSSP_VER2]" r3="MSSP_AFFID: [MSSP_AFFID]" r4=""/>
        <SETTING Name="MSSP_UPDATE_ONE_CHANCE" Scope="SYSTEM" Type="STR" Value="YES"/>
      </UPDATECOMMANDS>
    </UPDATE>
    <!-- MSS+ emergency update mechanism: END -->
	
    <!-- Enable Bing Search on Germany and Australia -->
    <UPDATE>
        <PRECONDITIONARRAY/>
        <UPDATECOMMANDS>
            <REDIRECT Location="https://sadownload.mcafee.com/products/SA/v1/update/bing_ss.xml"/>
        </UPDATECOMMANDS>
    </UPDATE>
 
    <!-- CH Sync rollout Start -->
    <UPDATE>
      <PRECONDITIONARRAY/>
      <UPDATECOMMANDS>
        <SETVAR Key="Sync_Not_Eligible" Value="^(91239|91240)$"/>
        <SETVAR Key="Valid_Exp_ForSync" Value="(?!([Sync_Not_Eligible]))^(.*)$"/>
      </UPDATECOMMANDS>
      </UPDATE>
    
    <UPDATE>
      <PRECONDITIONARRAY>
            <PRECONDITION Name="[SETTING:SYSTEM@*Experiment]" Type="STR" Compare="RE"><![CDATA[[Valid_Exp_ForSync]]]></PRECONDITION>
            <PRECONDITION Name="[SETTING:SYSTEM@full_sync_disabled]" Type="STR" Compare="NEQ"><![CDATA[FALSE]]></PRECONDITION>
      </PRECONDITIONARRAY>
      <UPDATECOMMANDS>
        <SETVAR Key="ChromeSync" Value="ELIGIBLE"/>
      </UPDATECOMMANDS>
    </UPDATE>
    
    <UPDATE>
      <PRECONDITIONARRAY>
        <PRECONDITION Name="[ChromeSync]" Type="STR" Compare="EQ"><![CDATA[ELIGIBLE]]></PRECONDITION>
        <PRECONDITION Type="CF" Compare="PERCENTAGE"><![CDATA[100]]></PRECONDITION>
      </PRECONDITIONARRAY>
      <UPDATECOMMANDS>
        <SETTING Name="full_sync_disabled" Scope="SYSTEM" Type="BOOL" Value="FALSE"/>
        <SETTING Name="DisableSearchResultTelemetry" Scope="SYSTEM" Type="BOOL" Value="FALSE"/>
        <SETTING Name="SearchResultTimeSafeguard" Scope="SYSTEM" Type="INT" Value="3600"/>
      </UPDATECOMMANDS>
    </UPDATE>
    <!-- CH Sync rollout End -->
  
    <!-- Stop Firefox Toasts -->
    <!-- Criteria for block eligibility -->
    <UPDATE>
      <PRECONDITIONARRAY>
        <PRECONDITION Name="[SETTING:USER@guard_ff_toast]" Type="STR" Compare="NEQ"><![CDATA[TRUE]]></PRECONDITION>
        <PRECONDITION Name="[YANDEX_GEO]" Type="STR" Compare="NEQ"><![CDATA[TRUE]]></PRECONDITION>
        <PRECONDITION Name="[SETTING:SYSTEM@ProviderForced]" Type="STR" Compare="NEQ"><![CDATA[23]]></PRECONDITION>
        <PRECONDITION Name="[INSTALLED_VERSION]" Type="VER" Compare="LT"><![CDATA[4.1.0.92]]></PRECONDITION>
      </PRECONDITIONARRAY>
      <UPDATECOMMANDS>
        <SETVAR Key="BLOCK_FF_TOAST_CHECK" Value="TRUE"/>
      </UPDATECOMMANDS>
    </UPDATE>

    <!-- Fresh Install Case -->
    <UPDATE>
      <PRECONDITIONARRAY>
        <PRECONDITION Name="[BLOCK_FF_TOAST_CHECK]" Type="STR" Compare="EQ"><![CDATA[TRUE]]></PRECONDITION>
        <PRECONDITION Name="[SETTING:USER@*SSDateStampShowedToast_ff]" Type="STR" Compare="EQ"><![CDATA[!UNKNOWN]]></PRECONDITION>
      </PRECONDITIONARRAY>
      <UPDATECOMMANDS>
        <SETTING Name="*SSDateStampShowedToast_ff_backup" Scope="USER" Type="INT64" Value="0"/>
        <SETTING Name="*SSDateStampShowedToast_ff" Scope="USER" Type="INT64" Value="3471336732"/>
        <SETTING Name="guard_ff_toast" Scope="USER" Type="BOOL" Value="TRUE"/>
        <SETVAR Key="BLOCK_FF_TOAST_CHECK" Value="FALSE"/>
      </UPDATECOMMANDS>
    </UPDATE>

    <!-- Other -->
    <UPDATE>
      <PRECONDITIONARRAY>
        <PRECONDITION Name="[BLOCK_FF_TOAST_CHECK]" Type="STR" Compare="EQ"><![CDATA[TRUE]]></PRECONDITION>
      </PRECONDITIONARRAY>
      <UPDATECOMMANDS>
        <SETTING Name="*SSDateStampShowedToast_ff_backup" Scope="USER" Type="INT64" Value="[SETTING:USER@*SSDateStampShowedToast_ff]"/>
        <SETTING Name="*SSDateStampShowedToast_ff" Scope="USER" Type="INT64" Value="3471336732"/>
        <SETTING Name="guard_ff_toast" Scope="USER" Type="BOOL" Value="TRUE"/>
      </UPDATECOMMANDS>
    </UPDATE>

    <!-- Re-enable Toast for users that got updated to 4.1.0.80 or greater -->
    <UPDATE>
      <PRECONDITIONARRAY>
        <PRECONDITION Name="[SETTING:USER@guard_ff_toast]" Type="STR" Compare="EQ"><![CDATA[TRUE]]></PRECONDITION>
        <PRECONDITION Name="[SETTING:USER@guard_ff_toast_80]" Type="STR" Compare="NEQ"><![CDATA[TRUE]]></PRECONDITION>
        <PRECONDITION Name="[INSTALLED_VERSION]" Type="VER" Compare="GE"><![CDATA[4.1.0.80]]></PRECONDITION>
      </PRECONDITIONARRAY>
      <UPDATECOMMANDS>
        <SETTING Name="*SSDateStampShowedToast_ff" Scope="USER" Type="INT64" Value="[SETTING:USER@*SSDateStampShowedToast_ff_backup]"/>
        <SETTING Name="*SSDateStampShowedToast_ff_backup" Scope="USER" Type="INT64" Value="0"/>
        <SETTING Name="guard_ff_toast_80" Scope="USER" Type="BOOL" Value="TRUE"/>
      </UPDATECOMMANDS>
    </UPDATE>

    <!-- ABTest redirect -->
    <UPDATE>
      <PRECONDITIONARRAY>
        <PRECONDITION Name="[BLOCK_UPDATES]" Type="STR" Compare="NEQ"><![CDATA[TRUE]]></PRECONDITION>
      </PRECONDITIONARRAY>
      <UPDATECOMMANDS>
        <REDIRECT Location="https://sadownload.mcafee.com/products/SA/v1/update/ABTests/abtest.xml" />
      </UPDATECOMMANDS>
    </UPDATE>
    
    <!-- We added a 'new user' tagging mechanism as part of the bsi. The tag is then available in wa.dat to differentiate with 
    NON-new users. On the first update for new users this tag is set to identify the new users and use that fact to perform 
    different actions. After the end of the first update, the tag gets unset so that, at the next update, those users will no
    longer be considered new users.
    -->
    <UPDATE>
      <PRECONDITIONARRAY>
        <PRECONDITION Name="[SETTING:SYSTEM@NEW_USER_ANY_FLOW]" Type="STR" Compare="NEQ"><![CDATA[FALSE]]></PRECONDITION>
      </PRECONDITIONARRAY>
      <UPDATECOMMANDS>
        <SETTING Name="NEW_USER_ANY_FLOW" Scope="SYSTEM" Type="STR" Value="FALSE"/>
      </UPDATECOMMANDS>
    </UPDATE>

    <UPDATE>
      <PRECONDITIONARRAY>
        <PRECONDITION Name="[SETTING:SYSTEM@NEW_USER_ABTEST]" Type="STR" Compare="NEQ"><![CDATA[FALSE]]></PRECONDITION>
      </PRECONDITIONARRAY>
      <UPDATECOMMANDS>
        <SETTING Name="NEW_USER_ABTEST" Scope="SYSTEM" Type="STR" Value="FALSE"/>
      </UPDATECOMMANDS>
    </UPDATE>
    
    <UPDATE>
      <PRECONDITIONARRAY>
        <PRECONDITION Name="[SETTING:SYSTEM@NEW_USER_FREEMIUM_FLOW]" Type="STR" Compare="NEQ"><![CDATA[FALSE]]></PRECONDITION>
      </PRECONDITIONARRAY>
      <UPDATECOMMANDS>
        <SETTING Name="NEW_USER_FREEMIUM_FLOW" Scope="SYSTEM" Type="STR" Value="FALSE"/>
      </UPDATECOMMANDS>
    </UPDATE>
    
    <UPDATE>
      <PRECONDITIONARRAY>
        <PRECONDITION Name="[SETTING:SYSTEM@NEW_USER_PC_FLOW]" Type="STR" Compare="NEQ"><![CDATA[FALSE]]></PRECONDITION>
      </PRECONDITIONARRAY>
      <UPDATECOMMANDS>
        <SETTING Name="NEW_USER_PC_FLOW" Scope="SYSTEM" Type="STR" Value="FALSE"/>
      </UPDATECOMMANDS>
    </UPDATE>
  
    <!-- ABTest cohorts fold-back -->
    <UPDATE>
        <PRECONDITIONARRAY>
            <PRECONDITION Name="[BLOCK_UPDATES]" Type="STR" Compare="NEQ"><![CDATA[TRUE]]></PRECONDITION>
        </PRECONDITIONARRAY>
        <UPDATECOMMANDS>
            <REDIRECT Location="https://sadownload.mcafee.com/products/SA/v1/update/ABTests/foldback.xml" />
        </UPDATECOMMANDS>
    </UPDATE>

    <!-- NPS redirect -->
    <UPDATE>
        <PRECONDITIONARRAY/>
        <UPDATECOMMANDS>
            <REDIRECT Location="https://sadownload.mcafee.com/products/SA/v1/update/nps.xml"/>
        </UPDATECOMMANDS>
    </UPDATE>

    <!-- Get versions -->
    <UPDATE>
        <PRECONDITIONARRAY>
            <PRECONDITION Name="[BLOCK_UPDATES]" Type="STR" Compare="NEQ"><![CDATA[TRUE]]></PRECONDITION>
        </PRECONDITIONARRAY>
        <UPDATECOMMANDS>
            <REDIRECT Location="https://sadownload.mcafee.com/products/SA/v1/update/candidate_core.xml"/>
            <REDIRECT Location="https://sadownload.mcafee.com/products/SA/v1/update/candidate_trans.xml"/>
            <REDIRECT Location="https://sadownload.mcafee.com/products/SA/v1/update/stable_core.xml"/>
            <REDIRECT Location="https://sadownload.mcafee.com/products/SA/v1/update/stable_trans.xml"/>
        </UPDATECOMMANDS>
    </UPDATE>

    <!-- Run update -->
    <UPDATE>
        <PRECONDITIONARRAY>
            <PRECONDITION Name="[BLOCK_UPDATES]" Type="STR" Compare="NEQ"><![CDATA[TRUE]]></PRECONDITION>
        </PRECONDITIONARRAY>
        <UPDATECOMMANDS>
            <REDIRECT Location="https://sadownload.mcafee.com/products/SA/v1/update/product_release.xml"/>
        </UPDATECOMMANDS>
    </UPDATE>

    <!-- Post binary update -->
    <UPDATE>
        <PRECONDITIONARRAY/>
        <UPDATECOMMANDS>
            <REDIRECT Location="https://sadownload.mcafee.com/products/SA/v1/update/post_binary_update.xml"/>
        </UPDATECOMMANDS>
    </UPDATE>

    <!-- XPI PAK update-->
    <UPDATE>
        <PRECONDITIONARRAY/>
        <UPDATECOMMANDS>
            <REDIRECT Location="https://sadownload.mcafee.com/products/SA/v1/update/xpi_core.xml"/>
        </UPDATECOMMANDS>
    </UPDATE>
 
</UPDATEARRAY>

<!--B27C9CDBFB9F76D08C372AC224941D27565667287A67223E2E2DACCD7F3883E7665692BE741321C7B255E68C346C3A65D1BADB660D299775EB3D72A8CC737443-->