// Structure size (64)
        SMBUtil.writeInt2(64, buffer, headerStart + 4);
        // Credit charge
        SMBUtil.writeInt2(1, buffer, headerStart + 6);
        // Status
        SMBUtil.writeInt4(0, buffer, headerStart + 8);
        // Command (READ = 0x0008)
        SMBUtil.writeInt2(0x0008, buffer, headerStart + 12);
        // Credit request/response
        SMBUtil.writeInt2(1, buffer, headerStart + 14);
        // Flags

        // Write context header
        SMBUtil.writeInt4(16, dst, dstIndex); // Next (offset to next context, 0 for last)
        dstIndex += 4;

        SMBUtil.writeInt2(4, dst, dstIndex); // NameOffset (from start of context)
        dstIndex += 2;

        SMBUtil.writeInt2(4, dst, dstIndex); // NameLength
        dstIndex += 2;

        SMBUtil.writeInt2(0, dst, dstIndex); // Reserved
        dstIndex += 2;

            SMBUtil.writeInt2(80, dst, dstIndex); // ReadChannelInfoOffset (after header)
            SMBUtil.writeInt2(16, dst, dstIndex + 2); // ReadChannelInfoLength
            dstIndex += 4;
        } else {
            SMBUtil.writeInt2(0, dst, dstIndex);
            SMBUtil.writeInt2(0, dst, dstIndex + 2);
            dstIndex += 4;
        }

        SMBUtil.writeInt4(this.originalMessageSize, dst, dstIndex);
        dstIndex += 4;

        // Reserved (2 bytes)
        SMBUtil.writeInt2(0, dst, dstIndex);
        dstIndex += 2;

        // Flags (2 bytes)
        SMBUtil.writeInt2(this.flags, dst, dstIndex);
        dstIndex += 2;

        // Session ID (8 bytes)
        SMBUtil.writeInt8(this.sessionId, dst, dstIndex);

        int idx = 0;
        SMBUtil.writeInt2(transformCount, data, idx);
        idx += 2;
        SMBUtil.writeInt2(reserved1, data, idx);
        idx += 2;
        SMBUtil.writeInt4(reserved2, data, idx);
        idx += 4;

        // SMB_DIRECT_RDMA_TRANSFORM array (only one element)
        SMBUtil.writeInt2(rdmaTransformId, data, idx);
        idx += 2;
        SMBUtil.writeInt2(0, data, idx); // Reserved
        idx += 2;

        SMBUtil.writeInt2(0x0311, buffer, 4);
        SMBUtil.writeInt2(1, buffer, 6);
        SMBUtil.writeInt4(128, buffer, 60); // Context offset

        // At offset 128 + 64 (header start), set context with excessive data length
        int contextPos = 192;
        SMBUtil.writeInt2(1, buffer, contextPos); // Context type

        int start = dstIndex;

        // StructureSize (2 bytes) - must be 36
        SMBUtil.writeInt2(STRUCTURE_SIZE, dst, dstIndex);
        dstIndex += 2;

        // Reserved (2 bytes)
        SMBUtil.writeInt2(0, dst, dstIndex);
        dstIndex += 2;

        // Flags (4 bytes)
        SMBUtil.writeInt4(flags, dst, dstIndex);
        dstIndex += 4;

        // LeaseKey (16 bytes)

        SMBUtil.writeInt2(9, buffer, offset);
        SMBUtil.writeInt2(80 - 64, buffer, offset + 2);
        SMBUtil.writeInt4(12 + fileNameBytes.length, buffer, offset + 4);

        // Write notification
        int notifyOffset = 80;
        SMBUtil.writeInt4(0, buffer, notifyOffset);
        SMBUtil.writeInt4(1, buffer, notifyOffset + 4);
        SMBUtil.writeInt4(fileNameBytes.length, buffer, notifyOffset + 8);

            SMBUtil.writeInt2(transformOffset, dst, dstIndex); // writeChannelInfoOffset
            SMBUtil.writeInt2(16, dst, dstIndex + 2); // writeChannelInfoLength (size of SMB2_RDMA_TRANSFORM)
        } else {
            SMBUtil.writeInt2(0, dst, dstIndex); // writeChannelInfoOffset
            SMBUtil.writeInt2(0, dst, dstIndex + 2); // writeChannelInfoLength
        }
        dstIndex += 4;

        final int start = dstIndex;
        SMBUtil.writeInt2(36, dst, dstIndex);
        SMBUtil.writeInt2(this.dialects.length, dst, dstIndex + 2);
        dstIndex += 4;

        SMBUtil.writeInt2(this.securityMode, dst, dstIndex);
        SMBUtil.writeInt2(0, dst, dstIndex + 2); // Reserved
        dstIndex += 4;

        SMBUtil.writeInt4(this.capabilities, dst, dstIndex);
        dstIndex += 4;