SMBUtil.writeInt2(16, buffer, offset); // Structure size
        buffer[offset + 2] = (byte) 0x01; // Share type (DISK)
        buffer[offset + 3] = 0; // Reserved
        SMBUtil.writeInt4(0x8001, buffer, offset + 4); // Share flags (DFS | ENCRYPT_DATA)
        SMBUtil.writeInt4(0x28, buffer, offset + 8); // Capabilities (DFS | SCALEOUT)
        SMBUtil.writeInt4(0x1F01FF, buffer, offset + 12); // Maximal access

        // EndOfFile
        SMBUtil.writeInt8(0, buffer, dataOffset + 40);
        // AllocationSize
        SMBUtil.writeInt8(0, buffer, dataOffset + 48);
        // ExtFileAttributes
        SMBUtil.writeInt4(0, buffer, dataOffset + 56);
        // FileNameLength
        SMBUtil.writeInt4(8, buffer, dataOffset + 60);
        // EaSize
        SMBUtil.writeInt4(0, buffer, dataOffset + 64);

        int idx = 0;
        SMBUtil.writeInt2(transformCount, data, idx);
        idx += 2;
        SMBUtil.writeInt2(reserved1, data, idx);
        idx += 2;
        SMBUtil.writeInt4(reserved2, data, idx);
        idx += 4;

        // SMB_DIRECT_RDMA_TRANSFORM array (only one element)
        SMBUtil.writeInt2(rdmaTransformId, data, idx);
        idx += 2;
        SMBUtil.writeInt2(0, data, idx); // Reserved
        idx += 2;

        final int start = dstIndex;

        SMBUtil.writeInt2(this.tflags, dst, dstIndex);
        dstIndex += 2;
        SMBUtil.writeInt2(this.desiredAccess, dst, dstIndex);
        dstIndex += 2;
        SMBUtil.writeInt2(this.searchAttributes, dst, dstIndex);
        dstIndex += 2;
        SMBUtil.writeInt2(this.fileAttributes, dst, dstIndex);
        dstIndex += 2;
        this.creationTime = 0;

        SMBUtil.writeInt2(this.fid, dst, dstIndex);
        dstIndex += 2;
        SMBUtil.writeInt4(this.offset, dst, dstIndex);
        dstIndex += 4;
        for (int i = 0; i < 4; i++) {
            dst[dstIndex++] = (byte) 0xFF;
        }
        SMBUtil.writeInt2(this.writeMode, dst, dstIndex);
        dstIndex += 2;
        SMBUtil.writeInt2(this.remaining, dst, dstIndex);
        dstIndex += 2;

        buffer[20] = 1; // Revision
        buffer[21] = 0; // Sbz1
        SMBUtil.writeInt2(0x8004, buffer, 22); // Control flags
        SMBUtil.writeInt4(0, buffer, 24); // Owner offset
        SMBUtil.writeInt4(0, buffer, 28); // Group offset
        SMBUtil.writeInt4(0, buffer, 32); // SACL offset
        SMBUtil.writeInt4(0, buffer, 36); // DACL offset

        int result = response.readBytesWireFormat(buffer, bufferIndex);

        int ci = 0;
        SMBUtil.writeInt4(0, ctx, ci); // Next = 0
        ci += 4;
        SMBUtil.writeInt2(0x10, ctx, ci); // NameOffset
        SMBUtil.writeInt2(4, ctx, ci + 2); // NameLength
        ci += 4;
        SMBUtil.writeInt2(0, ctx, ci); // Reserved
        SMBUtil.writeInt2(0x20, ctx, ci + 2); // DataOffset
        ci += 4;
        SMBUtil.writeInt4(8, ctx, ci); // DataLength
        ci += 4;

        byte[] buffer = new byte[10];
        // sid = 1
        writeInt2(1, buffer, 0);
        // numEntries = 2
        writeInt2(2, buffer, 2);
        // isEndOfSearch = true
        buffer[4] = 0x01;
        buffer[5] = 0x00;
        // eaErrorOffset = 3
        writeInt2(3, buffer, 6);
        // lastNameOffset = 4
        writeInt2(4, buffer, 8);

        SMBUtil.writeInt2(0x0311, buffer, 4);
        SMBUtil.writeInt2(1, buffer, 6);
        SMBUtil.writeInt4(128, buffer, 60); // Context offset

        // At offset 128 + 64 (header start), set context with excessive data length
        int contextPos = 192;
        SMBUtil.writeInt2(1, buffer, contextPos); // Context type

        SMBUtil.writeInt2(this.searchAttributes, dst, dstIndex);
        dstIndex += 2;
        SMBUtil.writeInt2(this.maxItems, dst, dstIndex);
        dstIndex += 2;
        SMBUtil.writeInt2(this.tflags, dst, dstIndex);
        dstIndex += 2;
        SMBUtil.writeInt2(this.informationLevel, dst, dstIndex);
        dstIndex += 2;
        SMBUtil.writeInt4(this.searchStorageType, dst, dstIndex);