https://bugs.winehq.org/show_bug.cgi?id=50623
--- Comment #11 from Esme Povirk madewokherd@gmail.com --- I did some separate work on safearray marshaling and found that SafeArraySubType needs to be set to a specific VT, and the default is to infer it based on the parameter type. So this might fix it: https://github.com/madewokherd/mono/commit/96853ceae1fe3ec7ec1932f840e649e30...
Not yet pushed to the develop branch because I'm waiting on CI and review.