Mac MAC_GetMillisecondsThunk: void __cdecl (uint32_t* pHigh, uint32_t* pLow)
The body is a frame-only tail JMP to MAC_GetMilliseconds 0x0001eba1, which is typed __cdecl (pdwHigh, pdwLow) with two 64-bit-half out pointers, so this thunk takes the same two stack args. The caller FPMilliseconds 0x0001eaf1 stores [ESP]=&local_4 (high) and [ESP+4]=&local_8 (low), then returns [EBP-8], not this call's EAX. pdw is refused, so they are named pHigh/pLow.
Changes 1, applied together
Set prototype
mac 0x0001ec37signatureundefined MAC_GetMillisecondsThunk(void)→void MAC_GetMillisecondsThunk(uint32_t* pHigh, uint32_t* pLow)conventionunknown→__cdecl