i registers

set args submission.txt
b func4
b *0x08048c9c
b *0x08048c9d
b *0x08048caf
b *0x08048ca0
b *0x08048ca7
b *0x08048cb0
b *0x08048cb9
layout split
layout regs
tui reg general

再一次调用func4

0x8(%ebp)解释得通了