Update cpu.js: add SUB instruction