Anyone laying ePSXe will perhaps have had the failure message saying that wnaspi32.dll is missing or has been tampered with. This can be because of various reasons, normally to do with cracked editions of Nero Burning Rome, or usage of Daemon Tools as a method of mounting ISO files or MDS, IMG, CCU files etc.
But the below hacker exploit is also a possibility, in the case of the pc having Winamp media player installed;
Nullsoft Winamp 5.581 (wnaspi32.dll) DLL Hijacking Exploit
Vendor: Nullsoft.
Product Web Page: http://www.winamp.com
Affected Version: 5.581 (x86)
Summary: Winamp is a media player for Windows-based PCs,
written by Nullsoft, now a subsidiary of AOL. It is
proprietary freeware/shareware, multi-format, extensible
with plug-ins and skins, and is noted for its graphical
sound visualization, playlist, and media library features.
Desc: Winamp 5.581 suffers from a dll hijacking vulnerability
that enables the attacker to execute arbitrary code on a local
level. The vulnerable extensions are .669, .aac, .aiff, .amf,
.au, .avr, .b4s, .caf and .cda thru wnaspi32.dll and dwmapi.dll
libraries.
gcc -shared -o wnaspi32.dll winamp.c
Compile and rename to wnaspi32.dll, create a file test.cda and put both
files in same dir and execute.
----
Tested on Microsoft Windows XP Professional SP3 (EN)
