CreateProcess

当一个线程调用CreateProcess时，系统就会创建一个进程内核对象，其初始使用计数是1 。该进程内核对象不是进程本身，而是操作系统管理进程时使用的一个较小的数据结构。可以将进程内核对象视为由进程的统计信息组成的一个较小的数据结构。然后，系统为新进程创建一个虚拟地址空间，并将可执行文件或任何必要的D L L 文件的代码和数据加载到该进程的地址空间中。

When a thread calls CreateProcess, the system creates a process kernel object with an initial usage count of 1.
When CreateProcess is called by a thread, the system will create a process kernel object of which the reference count is 1.

This process kernel object is not the process itself but a small data structure that the operating system uses to manage the process—you can think of the process kernel object as a small data structure that consists of statistical information about the process.
This process kernel object is not the process itself, instead it is a small data structure used by the operating system when managing the process. Process kernel object can be seen as a small data structure which is composed of the statistical information of the process.

The system then creates a virtual address space for the new process and loads the code and data for the executable file and any required DLLs into the process's address space.
Then the system will create a virtual address space for the new process and put the code and data of the executable file and any nessary DLL files intot the address space.