The book "Inside Windows 6th Edition" says:
The steps in the following list are taken inside the Windows CreateThread function in Kernel32.dll