In order to show key operating process of Windows OS visually, a method is proposed according to several entities' state information collected from the Windows operating process to make the kernel activities visual. We have realized the visualization of CPU, thread, process, queues of thread and process, clock, and several exterior hardwares and reconstructed the thread scheduling process. The data used in visualization is sampled during the practical running process of Windows system. This is a good approach to comprehend and analyze the Windows operating process and scheduling algorithm.