The Desktop (including the Bitmap on it) is actually drawn by the window system itself. So that is basically quite deep and old, too. So according to the changes that happened since NT4 I suppose that the painting is actually done in win32k.sys . The driver was created to replace win32.dll which would have done everything in user-mode with context switching.