any ideas on how XP locates rundll32.exe
Like pretty much everything else, via the PATH system variable.
If you can't get into a command prompt to type
Path, you can also see it via System\Properties\Advanced\Environment Variables
Should be something like
PATH=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem ;
SD