On XP SP2 the module "ws2_32.dll" was compiled with SafeSEH, so you can't use it to execute code by overwriting the SEH handler to point into it. You can see which modules are SafeSEH enabled and which aren't by using this OllyPlugin at:

http://www.openrce.org/downloads/details/244/OllySSEH

[ reply ]