Bomblab please find the answer. thanks!

(gdb) disas func4 Dump of assembler code for function func4: $0x8, %rsp %eax , %eax %esi, %eax %eax, %ecx 0x0000000000400e70 0x0000000000400e74 : 0x0000000000400e76 : 0x0000000000400e7a 0x0000000000400e7d 0x0000000000400e80 0x0000000000400e82 0x0000000000400e85 0x0000000000400e87 0x0000000000400e8c 0x0000000000400e91 0x0000000000400e93 0x0000000000400e95 0x0000000000400e9c 0x0000000000400e9e 0x0000000000400eal 0x0000000000400ea6 0x0000000000400eaa 0x0000000000400eae sub mov sub mov shr lea sar lea cmip ile 0x400e95 add jmp 0x400eaa.func4+58> mov ige 0x400eaa.func4+58> lea callq 0x400e70 lea 0x1 (%rax, %rax, 1) , %eax add retq ecx (%rcx, %rax, 1) , %eax %eax ( %rax, %rsi, 1) , %ecx %edi, %ecx -0x1 (%rcx) , %eax %eax, %eax $0x0, %eax %edi, %ecx 0x1 (%rcx) , %esi $0x8, %rsp End of assembler dump. (gdb) disas func4 Dump of assembler code for function func4: $0x8, %rsp %eax , %eax %esi, %eax %eax, %ecx 0x0000000000400e70 0x0000000000400e74 : 0x0000000000400e76 : 0x0000000000400e7a 0x0000000000400e7d 0x0000000000400e80 0x0000000000400e82 0x0000000000400e85 0x0000000000400e87 0x0000000000400e8c 0x0000000000400e91 0x0000000000400e93 0x0000000000400e95 0x0000000000400e9c 0x0000000000400e9e 0x0000000000400eal 0x0000000000400ea6 0x0000000000400eaa 0x0000000000400eae sub mov sub mov shr lea sar lea cmip ile 0x400e95 add jmp 0x400eaa.func4+58> mov ige 0x400eaa.func4+58> lea callq 0x400e70 lea 0x1 (%rax, %rax, 1) , %eax add retq ecx (%rcx, %rax, 1) , %eax %eax ( %rax, %rsi, 1) , %ecx %edi, %ecx -0x1 (%rcx) , %eax %eax, %eax $0x0, %eax %edi, %ecx 0x1 (%rcx) , %esi $0x8, %rsp End of assembler dump