pkg debug/pe, const IMAGE_DLLCHARACTERISTICS_NO_BIND = 2048
pkg debug/pe, const IMAGE_DLLCHARACTERISTICS_NO_BIND ideal-int
pkg debug/pe, const IMAGE_DLLCHARACTERISTICS_NO_ISOLATION = 512
pkg debug/pe, const IMAGE_DLLCHARACTERISTICS_NO_ISOLATION ideal-int
pkg debug/pe, const IMAGE_DLLCHARACTERISTICS_NO_SEH = 1024
pkg debug/pe, const IMAGE_DLLCHARACTERISTICS_NO_SEH ideal-int

        // Setup SMB3.1.1 negotiation
        when(negotiateResponse.getSelectedDialect()).thenReturn(DialectVersion.SMB311);
        when(negotiateResponse.getSelectedPreauthHash()).thenReturn(1); // SHA-512
        setPrivateField(transport, "smb2", true);
        setPrivateField(transport, "negotiated", negotiateResponse);

        int threadCount = 10;
        CountDownLatch startLatch = new CountDownLatch(1);

    void testReadBytesWireFormatValidStructureSize() throws Exception {
        response = new Smb2QueryDirectoryResponse(mockConfig, Smb2QueryDirectoryRequest.FILE_BOTH_DIRECTORY_INFO);

        byte[] buffer = new byte[512];
        int bufferIndex = 0;

        // Set structure size to 9 (valid)
        SMBUtil.writeInt2(9, buffer, bufferIndex);
        // Set buffer offset (relative to header start)

        when(mockConfig.getMinimumVersion()).thenReturn(DialectVersion.SMB210);
        request = new Smb2NegotiateRequest(mockConfig, Smb2Constants.SMB2_NEGOTIATE_SIGNING_REQUIRED);

        byte[] buffer = new byte[512];

        // When
        int bytesWritten = request.writeBytesWireFormat(buffer, 0);

        // Then
        assertTrue(bytesWritten > 0);

        // Verify structure size

    void testWriteParametersWireFormatWithSmbInfoAllocation() {
        trans2QueryFSInfo = new Trans2QueryFSInformation(config, FileSystemInformation.SMB_INFO_ALLOCATION);

        byte[] buffer = new byte[512];
        int written = trans2QueryFSInfo.writeParametersWireFormat(buffer, 0);

        // Should write 2 bytes: information level
        assertEquals(2, written);

    @DisplayName("Should test writeBytesWireFormat directly")
    void testWriteBytesWireFormatDirect() {
        // Given
        byte[] buffer = new byte[512];
        int offset = 100;

        // First encode to set headerStart
        byte[] tempBuffer = new byte[512];
        request.encode(tempBuffer, 50);

        // When
        int bytesWritten = request.writeBytesWireFormat(buffer, offset);

        // Then

        @DisplayName("calculatePreauthHash computes SHA-512 chain for SMB 3.1.1")
        void preauthHash_happyPath() throws Exception {
            setField(transport, "smb2", true);
            Smb2NegotiateResponse nego = new Smb2NegotiateResponse(cfg);
            setField(nego, "selectedDialect", DialectVersion.SMB311);
            setField(nego, "selectedPreauthHash", 1); // 1 => SHA-512
            setField(transport, "negotiated", nego);

        // Prepare test data
        byte[] buffer = new byte[22];
        int idFileSystem = 0x12345678;
        int sectPerAlloc = 8;
        long alloc = 1000000L;
        long free = 500000L;
        int bytesPerSect = 512;

        // Encode test data
        int offset = 0;
        SMBUtil.writeInt4(idFileSystem, buffer, offset); // idFileSystem (skipped)
        offset += 4;
        SMBUtil.writeInt4(sectPerAlloc, buffer, offset);

reached the end of their useful life.

Valid values: 

```
******@****.***
hmac-sha2-512******@****.***
hmac-sha2-256
hmac-sha2-512
hmac-sha1
hmac-sha1-96
```

### Certificate-based authentication

`--sftp=trusted-user-ca-key=...` specifies a file containing public key of certificate authority that is trusted

    }

    @Test
    @DisplayName("Should create response with configuration and output buffer")
    void testConstructor() {
        // Given
        byte[] buffer = new byte[512];
        int offset = 10;

        // When
        Smb2ReadResponse resp = new Smb2ReadResponse(mockConfig, buffer, offset);

        // Then
        assertNotNull(resp);