It turns out this worked: the developer took out capturing the return value from xp_cmdshell (e.g., removing @retval = xp_cmdshell... and instead just calling xp_cmdshell... ).

Thank you for the troubleshooting tip - I'll ask the developer if he had tried that or not.