I made an error in my explanation of the system heap. I said that 0106 returns with HL pointing to the reserved space. It turns out that DE actually has this function. HL seems to return pointing to the location just after the end of the reserved space.
imc
