w8classic works by by closing the handle to a shared memory section named "\Sessions\<Session ID>\Windows\ThemeSection" in the WinLogon process.