sandbox.h: implement read mem directly
sandbox: mark addressRange methods virtual