Thanks! nLite worked. Or rather, it didn't. It'd patch the x64 dll, then would crash for the x32 dll, deleting it (wuxtheme.dl_). I still tried with the x64 dll alone and it works perfectly. It would seem the theme's signature is only checked when it's loaded and not every time uxtheme hooks into an application.