syscall_hooker: create README.md