package main

import (
	"fmt"
	"log"

	"github.com/laenix/ewfgo"
)

func main() {
	// Open EWF image
	img, err := ewf.Open("evidence.E01")
	if err != nil {
		log.Fatal(err)
	}
	defer img.Close()

	// Print metadata
	fmt.Printf("Case: %s\n", img.CaseNumber())
	fmt.Printf("Evidence: %s\n", img.EvidenceNumber())
	fmt.Printf("Examiner: %s\n", img.Examiner())

	// Print disk info
	disk := img.GetDiskInfo()
	fmt.Printf("Total Sectors: %d\n", disk.TotalSectors)
	fmt.Printf("Sector Size: %d bytes\n", disk.SectorBytes)

	// Read MBR
	mbr, err := img.MBR()
	if err != nil {
		log.Fatal(err)
	}
	fmt.Printf("Disk Signature: %d\n", mbr.DiskSignature)

	// Scan filesystems
	parts, _ := img.ScanFileSystems()
	for _, p := range parts {
		fmt.Printf("Partition %d: %s (%s)\n", p.Index, p.TypeName, p.FileSystem)
	}

	// Read partition data
	if len(parts) > 0 {
		data, err := img.ReadSectors(parts[0].StartSector, 16)
		if err == nil {
			fmt.Printf("Read %d bytes from partition\n", len(data))
		}
	}
}