start investigate sys call instruction.
only remaining the fetch args part.