capture_ntfs_streams(): Set 'ret' properly