Client-side check antivirus path/key register

Dear friends I want to understand how APM check if antivirus is present in the client device. Is there any matrix to explain wich paths or key register is APM checking to find AV?

 

B/R