Rethinking PGD Attack: Is Sign Function Necessary?