Enumerates all streams with a ::$DATA stream type in the specified file or directory
#include <WinAPIFiles.au3>
_WinAPI_EnumFileStreams ( $sFilePath )
| $sFilePath | The path to the file or directory. The file must be located on volume with NTFS file system. |
| Success: | The 2D array of the stream names and its sizes. [0][0] - Number of rows in array (n) [0][1] - Unused [n][0] - Stream name. [n][1] - Stream size, in bytes. |
| Failure: | Sets the @error flag to non-zero, @extended flag may contain the NTSTATUS error code. |
Search ZwQueryInformationFile in MSDN Library.
#include <Array.au3>
#include <MsgBoxConstants.au3>
#include <WinAPIFiles.au3>
#include <WinAPIHObj.au3>
#include <WinAPIMem.au3>
#include <WinAPIMisc.au3>
#include <WinAPIShPath.au3>
_Example()
Func _Example()
Local Const $sFile = @TempDir & '\Test.txt'
; Check NTFS file system
If StringCompare(DriveGetFileSystem(_WinAPI_PathStripToRoot($sFile)), 'NTFS') Then
MsgBox(($MB_ICONERROR + $MB_SYSTEMMODAL), 'Error', 'The file must be on an NTFS file system volume.')
Exit
EndIf
Local $hFile, $pData, $sName, $iBytes
; Create text file with three alternative streams named AS1, AS2, and AS3 respectively
For $i = 0 To 3
If $i Then
$pData = _WinAPI_CreateString('Alternative stream ' & $i)
$sName = ':AS' & $i
Else
$pData = _WinAPI_CreateString('Main stream')
$sName = ''
EndIf
$hFile = _WinAPI_CreateFile($sFile & $sName, 1, 4)
_WinAPI_WriteFile($hFile, $pData, _WinAPI_GetMemorySize($pData) - 2, $iBytes)
_WinAPI_CloseHandle($hFile)
_WinAPI_FreeMemory($pData)
Next
; Enumerate all existing streams in the file
Local $aData = _WinAPI_EnumFileStreams($sFile)
_ArrayDisplay($aData, '_WinAPI_EnumFileStreams')
; Read text data from each stream
$pData = _WinAPI_CreateBuffer(1024)
For $i = 1 To $aData[0][0]
$hFile = _WinAPI_CreateFile($sFile & $aData[$i][0], 2, 2, 6)
_WinAPI_ReadFile($hFile, $pData, $aData[$i][1], $iBytes)
_WinAPI_CloseHandle($hFile)
$aData[$i][1] = _WinAPI_GetString($pData)
Next
_WinAPI_FreeMemory($pData)
_ArrayDisplay($aData, '_WinAPI_EnumFileStreams')
FileDelete($sFile)
EndFunc ;==>_Example