//  给PE添加一个新节
function AddPeFileSection(lpszFileName: PChar; lpszSectionName: PChar; lpAddFileData: Pointer; dwDataSize: DWORD): Boolean;
var
  bResult: Boolean;
  hFile: THandle;
  dwFileSize, dwFileDataSize, dwBytes: DWORD;

  lpFileData: Pointer;
  lpNtHeaders: PImageNtHeaders;
  lpSectionHeader: PImageSectionHeader;
  stNewSectionHeader: TImageSectionHeader;
begin
  Result := False;
  hFile := CreateFile(lpszFileName, GENERIC_READ or GENERIC_WRITE, FILE_SHARE_READ, nil, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, 0);
  if (hFile = INVALID_HANDLE_VALUE) then Exit;
  dwFileSize := GetFileSize(hFile, nil);

  lpFileData := Pointer(GlobalAlloc(GMEM_FIXED, dwFileSize));
  if (lpFileData = nil) then Exit;

  bResult := ReadFile(hFile, lpFileData^, dwFileSize, dwBytes, nil);
  CloseHandle(hFile);
  if Not bResult then Exit;

  //  验证PE结构
  if (PImageDosHeader(lpFileData)^.e_magic <> IMAGE_DOS_SIGNATURE) then
  begin
    GlobalFree(DWORD(lpFileData));
    Exit;
  end;
  lpNtHeaders := PImageNtHeaders(DWORD(lpFileData) + DWORD(PImageDosHeader(lpFileData)^._lfanew));
  if (lpNtHeaders^.Signature <> IMAGE_NT_SIGNATURE) then
  begin
    GlobalFree(DWORD(lpFileData));
    Exit;
  end;
  //   读取最后一个段数据
  lpSectionHeader := PImageSectionHeader(DWORD(lpNtHeaders) + SizeOf(DWORD) + SizeOf(TImageFileHeader) + lpNtHeaders^.FileHeader.SizeOfOptionalHeader);
  lpSectionHeader := PImageSectionHeader(DWORD(lpSectionHeader) + (SizeOf(TImageSectionHeader) * (DWORD(lpNtHeaders^.FileHeader.NumberOfSections)- 1)));

  //  设置段属性-以DATA为标准
  dwFileDataSize := GetAlignedSize(dwDataSize, lpNtHeaders^.OptionalHeader.FileAlignment);

  ZeroMemory(@stNewSectionHeader, SizeOf(TImageSectionHeader));
  lstrcpyn(@stNewSectionHeader.Name[0], lpszSectionName, 8);
  stNewSectionHeader.VirtualAddress := lpSectionHeader^.VirtualAddress + lpNtHeaders^.OptionalHeader.SectionAlignment;

  stNewSectionHeader.Misc.VirtualSize := (dwFileDataSize div lpNtHeaders^.OptionalHeader.FileAlignment) * lpNtHeaders^.OptionalHeader.SectionAlignment;
  stNewSectionHeader.SizeOfRawData := dwFileDataSize;
  stNewSectionHeader.PointerToRawData := lpSectionHeader^.SizeOfRawData + lpSectionHeader^.PointerToRawData;
  stNewSectionHeader.Characteristics := $C0000040;

  CopyMemory(Pointer(DWORD(lpSectionHeader) + SizeOf(TImageSectionHeader)), @stNewSectionHeader, SizeOf(TImageSectionHeader));
  
  //  设置PE空间&段数量
  lpNtHeaders^.FileHeader.NumberOfSections := lpNtHeaders.FileHeader.NumberOfSections + 1;
  lpNtHeaders^.OptionalHeader.SizeOfImage := lpNtHeaders^.OptionalHeader.SizeOfImage + stNewSectionHeader.Misc.VirtualSize;

  //  填充数据
  dwFileSize := dwFileSize + dwFileDataSize;
  lpFileData := Pointer(GlobalReAlloc(DWORD(lpFileData), dwFileSize, GMEM_FIXED or GMEM_MOVEABLE or GMEM_ZEROINIT));
  if (lpFileData = nil) then Exit;

  hFile := CreateFile(lpszFileName, GENERIC_READ or GENERIC_WRITE, FILE_SHARE_READ, nil, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, 0);
  if (hFile = INVALID_HANDLE_VALUE) then Exit;

  bResult := WriteFile(hFile, lpFileData^, dwFileSize, dwBytes, nil);
  if (bResult) then
  begin
    SetFilePointer(hFile, dwFileSize - dwFileDataSize, nil, FILE_BEGIN);
    bResult := WriteFile(hFile, lpAddFileData^, dwDataSize, dwBytes, nil);
    if (bResult) then
    begin
      Result := True;
    end;
  end;
  GlobalFree(DWORD(lpFileData));
  CloseHandle(hFile);
end;