1. Build a stack frame for itself, including the part that looks like main called it. 2. So, our code first needs to push the return address in main (as if the call instruction had executed). 3. Then it can proceed as normal as if it were written like this: 1 int attack() 2 { 3 return 0xdeadbeef; 4 }