uses Windows;
{$APPTYPE CONSOLE}

procedure LStrFromPCharLen(Dest: PAnsiString; Source: PAnsiChar; Length: Integer);
asm
 jmp System.@LStrFromPCharLen
end;

procedure LStrClr(S:PAnsiString);
asm
 jmp System.@LStrClr
end;

procedure ExpandEnvironmentStrings2(var s:string);
var Buffer:pchar;
   Size:cardinal;
begin
 Size:=ExpandEnvironmentStrings(pchar(s),nil,0);
 GetMem(Buffer,Size);
 Size:=ExpandEnvironmentStrings(pchar(s),Buffer,Size);
 SetString(s,Buffer,Size-1);
 FreeMem(Buffer);
end;

procedure Write_(var s:string);
var Temp:dword;
begin
 WriteFile(GetStdHandle(STD_OUTPUT_HANDLE),s[1],Length(s),Temp,nil);
end;

var
 s:pstring;
 s_holder:integer;
begin
 s:=@s_holder;
 LStrFromPCharLen(s,'%PATH%',6);
 ExpandEnvironmentStrings2(s^);
 Write_(s^);
 LStrClr(s);
end.

The instruction at "0x00401080" referenced memory at "0x00000000". The memory could not be "read".

Click on OK to terminate the program
Click on CANCEL to debug the program