- alloc_info_struct = anchor - sizeof('struct _mhead')
- alloc_info = kern.GetValueFromAddress(alloc_info_struct, 'struct _mhead*')
- alloc_size = unsigned(alloc_info.mlen) - (sizeof('struct _mhead'))
- table_entries = alloc_size / sizeof('struct kauth_cred_entry_head')