How does IIs Crypto Update the registry?

I'm curious to understand the process behind how IIS Crypto updates the registry. Could you explain, in a step-by-step manner, the key actions that IIS Crypto takes to modify the registry settings related to cryptography? I'm specifically interested in how it identifies the necessary changes, implements them securely, and ensures that the updates don't interfere with other registry settings or system operations. Additionally, I'd like to know if there are any specific permissions or privileges required for IIS Crypto to make these changes.