nevermind, it's a rop chain, so you'd have to add a gadget to get the return value.  derp.