private val bytesIn = Buffer()
  private val hpackReader = Hpack.Reader(bytesIn, 4096)

  protected fun testDecoder(story: Story) {
    for (testCase in story.cases) {
      val encoded = testCase.wire ?: continue
      bytesIn.write(encoded)
      hpackReader.readHeaders()
      assertSetEquals(
        "seqno=$testCase.seqno",
        testCase.headersList,
        hpackReader.getAndResetHeaderList(),
      )
    }
  }

    }

    @Test
    @DisplayName("Test decode with owner SID only")
    void testDecodeWithOwnerSidOnly() throws SMBProtocolDecodingException {
        // Prepare buffer with owner SID only
        prepareMinimalSecurityDescriptorBuffer(testBuffer, 0, true, false, false);

        int size = securityDescriptor.decode(testBuffer, 0, testBuffer.length);

        // decode returns 0 when no DACL is present (falls through)

    }

    /**
     * Downloads a log file by its encoded ID.
     *
     * @param id the Base64 encoded filename of the log file to download
     * @return ActionResponse containing the log file stream
     */
    @Execute
    @Secured({ ROLE, ROLE + VIEW })
    public ActionResponse download(final String id) {

  private const val PREFIX_5_BITS = 0x1f
  private const val PREFIX_6_BITS = 0x3f
  private const val PREFIX_7_BITS = 0x7f

  private const val SETTINGS_HEADER_TABLE_SIZE = 4_096

  /**
   * The decoder has ultimate control of the maximum size of the dynamic table but we can choose
   * to use less. We'll put a cap at 16K. This is arbitrary but should be enough for most purposes.
   */

     */
    protected abstract void encodeWitnessParameters(NdrBuffer buf) throws NdrException;

    /**
     * Decodes the witness RPC message parameters from NDR format.
     * Subclasses must implement this method to decode their specific parameters.
     *
     * @param buf the NDR buffer to decode from
     * @throws NdrException if decoding fails
     */

		let outputBuf = "";
		globalThis.fs = {
			constants: { O_WRONLY: -1, O_RDWR: -1, O_CREAT: -1, O_TRUNC: -1, O_APPEND: -1, O_EXCL: -1, O_DIRECTORY: -1 }, // unused
			writeSync(fd, buf) {
				outputBuf += decoder.decode(buf);
				const nl = outputBuf.lastIndexOf("\n");
				if (nl != -1) {
					console.log(outputBuf.substring(0, nl));
					outputBuf = outputBuf.substring(nl + 1);
				}
				return buf.length;
			},

            final String challenge) throws NTLMEngineException {
        Type2Message type2Message;
        try {
            type2Message = new Type2Message(Base64.getDecoder().decode(challenge));
        } catch (final IOException exception) {
            throw new NTLMEngineException("Invalid NTLM type 2 message", exception);
        }
        final int type2Flags = type2Message.getFlags();

    public int encode(byte[] dst, int dstIndex) {
        byte[] data = getData();
        System.arraycopy(data, 0, dst, dstIndex, data.length);
        return data.length;
    }

    @Override
    public int decode(byte[] buffer, int bufferIndex, int len) throws SMBProtocolDecodingException {
        if (len < 20) {
            throw new SMBProtocolDecodingException("Invalid RDMA Transform Capabilities context length: " + len);
        }

     * @param username the username
     * @param passwordHashHex
     *            NT password hash, hex encoded
     */
    public NtlmNtHashAuthenticator(final String domain, final String username, final String passwordHashHex) {
        this(domain, username, Hex.decode(passwordHashHex));
    }

    private NtlmNtHashAuthenticator(final byte[] passwordHash) {
        this.ntHash = passwordHash;
    }

        assertEquals("NTLM ", headerValue.substring(0, 5), "Header should start with 'NTLM '");

        // Decode the returned Type 2 message and check its signature and type
        byte[] type2Bytes = Base64.getDecoder().decode(headerValue.substring(5));
        assertEquals('N', (char) type2Bytes[0]);
        assertEquals('T', (char) type2Bytes[1]);