Weird naming. new_cmd is a Syscall dict, orig_cmd is a string or list.