An application in the bug 38400 passes a not initialized ofn->lpstrFileTitle
to GetSaveFileNameW(). Basically ofn->lpstrFileTitle points to the stack
approximately 428 bytes above the current stack pointer, and since Wine's
GetSaveFileNameW() uses more than 4096 bytes one of internal stack frames is
guaranteed to be trashed after copying file name to ofn->lpstrFileTitle.