Operand address generation