1*33de042dSApple OSS Distributionsfrom xnu import * 2*33de042dSApple OSS Distributions 3*33de042dSApple OSS Distributions@lldb_command("showcoreanalyticsformatstr") 4*33de042dSApple OSS Distributionsdef PrintCoreAnalyticsFormatStr(cmd_args=None): 5*33de042dSApple OSS Distributions """ Pretty prints the full format string for a core analyics event 6*33de042dSApple OSS Distributions Usage: showcoreanalyticsformatstr <event> 7*33de042dSApple OSS Distributions """ 8*33de042dSApple OSS Distributions if not cmd_args: 9*33de042dSApple OSS Distributions raise ArgumentError("Please specify an event.") 10*33de042dSApple OSS Distributions return 11*33de042dSApple OSS Distributions #event_ptr = kern.GetValueFromAddress(cmd_args[0], "struct _ca_event *").GetSBValue().GetValueAsUnsigned() 12*33de042dSApple OSS Distributions #print(event_ptr) 13*33de042dSApple OSS Distributions event = kern.GetValueFromAddress(cmd_args[0], "struct _ca_event *") 14*33de042dSApple OSS Distributions event_name = str(event.format_str) 15*33de042dSApple OSS Distributions print(event_name) 16*33de042dSApple OSS Distributions curr = event.format_str.GetSBValue().GetValueAsUnsigned() 17*33de042dSApple OSS Distributions offset = len(event_name) + 1 18*33de042dSApple OSS Distributions while True: 19*33de042dSApple OSS Distributions val = kern.GetValueFromAddress(curr + offset, "char *") 20*33de042dSApple OSS Distributions as_string = str(val) 21*33de042dSApple OSS Distributions if len(as_string) == 0: 22*33de042dSApple OSS Distributions break 23*33de042dSApple OSS Distributions offset = offset + len(as_string) + 1 24*33de042dSApple OSS Distributions print(as_string) 25