Type Mac BNCLIENT_GetCallbacks as void* __cdecl (void)
Mac body reads no args, calls BNCLIENT_InitState, then returns the address of a static callback table in EAX (LEA EAX,[ESI+0x33d1e9]); plain RET. The caller at 0x0019c161 keeps the result (MOV EDI,EAX).
Changes 1, applied together
Set prototype
mac 0x0005ad31signatureundefined BNCLIENT_GetCallbacks(void)→void* BNCLIENT_GetCallbacks(void)conventionunknown→__cdecl