@DisplayName("Should preserve other flags when setting signed flag")
        void testSignPreservesOtherFlags() {
            // Set initial flags with some existing flags
            int initialFlags = 0x00000001 | 0x00000002 | 0x00000004;
            SMBUtil.writeInt4(initialFlags, data, 16);

            digest.sign(data, 0, data.length, request, response);

            int flags = SMBUtil.readInt4(data, 16);

                Arguments.of(0xC0000001, "A device attached to the system is not functioning."),
                Arguments.of(0x00000000, "NT_STATUS_SUCCESS"),
                // An error that maps via DOS mapping
                Arguments.of(0x00000002, SmbException.getMessageByCode(0x00000002)),
                // Unknown code → hex string (uppercase)
                Arguments.of(0xDEADBEEF, "0xDEADBEEF"));
    }

        Encdec.enc_uint32le(0x00000000, blob, 4); // Reserved
        Encdec.enc_uint64le(nanos1601, blob, 8);
        System.arraycopy(clientChallenge, 0, blob, 16, 8);
        Encdec.enc_uint32le(0x00000000, blob, 24); // Unknown
        System.arraycopy(avPairs, 0, blob, 28, avPairsLength);
        Encdec.enc_uint32le(0x00000000, blob, 28 + avPairsLength);

        // Act

class NtStatusTest {

    @Test
    @DisplayName("Should define well-known NT status constants")
    void testWellKnownStatusConstants() {
        // Verify important NT status constants are defined
        assertEquals(0x00000000, NtStatus.NT_STATUS_SUCCESS);
        assertEquals((int) 0xC0000022L, NtStatus.NT_STATUS_ACCESS_DENIED);
        assertEquals((int) 0xC0000034L, NtStatus.NT_STATUS_OBJECT_NAME_NOT_FOUND);

        assertTrue(newNotification.getTimestamp() <= afterCreation);
    }

    @Test
    void testResourceStateConstants() {
        assertEquals(0x00000000, WitnessNotification.WITNESS_RESOURCE_STATE_UNKNOWN);
        assertEquals(0x00000001, WitnessNotification.WITNESS_RESOURCE_STATE_AVAILABLE);
        assertEquals(0x000000FF, WitnessNotification.WITNESS_RESOURCE_STATE_UNAVAILABLE);
    }

    @DisplayName("Should verify DCERPC_FAULT_OTHER constant value")
    void testDcerpcFaultOther() {
        assertEquals(0x00000001, DcerpcError.DCERPC_FAULT_OTHER);
    }

    @Test
    @DisplayName("Should verify DCERPC_FAULT_ACCESS_DENIED constant value")
    void testDcerpcFaultAccessDenied() {
        assertEquals(0x00000005, DcerpcError.DCERPC_FAULT_ACCESS_DENIED);
    }

    @Test

    private static final int FILE_NOTIFY_CHANGE_DIR_NAME = 0x00000002;
    private static final int FILE_NOTIFY_CHANGE_ATTRIBUTES = 0x00000004;
    private static final int FILE_NOTIFY_CHANGE_SIZE = 0x00000008;
    private static final int FILE_NOTIFY_CHANGE_LAST_WRITE = 0x00000010;
    private static final int FILE_NOTIFY_CHANGE_LAST_ACCESS = 0x00000020;

        Encdec.enc_uint32le(0x00000000, temp, 4); // Reserved
        Encdec.enc_uint64le(nanos1601, temp, 8);
        System.arraycopy(clientChallenge, 0, temp, 16, 8);
        Encdec.enc_uint32le(0x00000000, temp, 24); // Unknown
        if (avPairs != null) {
            System.arraycopy(avPairs, 0, temp, 28, avPairsLength);
        }
        Encdec.enc_uint32le(0x00000000, temp, 28 + avPairsLength); // mystery bytes!

                (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, // 0x00000000
                (byte) 0xEF, (byte) 0xCD, (byte) 0xAB, (byte) 0x89 // 0x89ABCDEF
        };

        assertEquals(0x12345678, SMBUtil.readInt4(src, 0));
        assertEquals(0xFFFFFFFF, SMBUtil.readInt4(src, 4));
        assertEquals(0x00000000, SMBUtil.readInt4(src, 8));
        assertEquals(0x89ABCDEF, SMBUtil.readInt4(src, 12));
    }

    <magic priority="60">
      <match value="0x09040600" type="string" offset="0">
        <match value="0x00001000" type="string" offset="4"/> <!-- Sheet -->
        <match value="0x00002000" type="string" offset="4"/> <!-- Chart -->
        <match value="0x00004000" type="string" offset="4"/> <!-- Macro -->
      </match>
    </magic>
    <sub-class-of type="application/x-tika-old-excel"/>