introduce a ->decode function for syscalls to output decoded parameters.

decode mmap PROT args as an example, but it's going to be more useful
for decoding structs.