To protect the SMAP feature of CPU, the SMAP bit CR4 register should be set. The current version of Shadow-box does not protect the SMAP bit, therefore, CR4 protection feature should be needed. Thank you @junorouse .