*
         * If signing is not active, the SecuritySignature field of the SMB Header for all messages sent, except
         * the SMB_COM_SESSION_SETUP_ANDX Response (section 2.2.4.53.2), MUST be set to
         * 0x0000000000000000. For the SMB_COM_SESSION_SETUP_ANDX Response, the SecuritySignature
         * field of the SMB Header SHOULD<226> be set to the SecuritySignature received in the

andMask<>+0(SB)/8, $0x00000000000000ff DATA andMask<>+8(SB)/8, $0x0000000000000000 DATA andMask<>+16(SB)/8, $0x000000000000ffff DATA andMask<>+24(SB)/8, $0x0000000000000000 DATA andMask<>+32(SB)/8, $0x0000000000ffffff DATA andMask<>+40(SB)/8, $0x0000000000000000 DATA andMask<>+48(SB)/8, $0x00000000ffffffff DATA andMask<>+56(SB)/8, $0x0000000000000000 DATA andMask<>+64(SB)/8, $0x000000ffffffffff DATA andMask<>+72(SB)/8, $0x0000000000000000 DATA andMask<>+80(SB)/8, $0x0000ffffffffffff DATA andMask<>+88(SB)/8,...

    <magic priority="50">
      <match value="0x7431" type="string" offset="0">
        <match value="[\x72|\x33|\x36|\x35]" type="regex" offset="3">
          <match value="0x00000000000000" offset="5"/>
        </match>
      </match>
    </magic>
    <!-- do we want to use this for such a rare format?   <glob pattern="*.rpy"/> -->
  </mime-type>