[Bug 20895] Invalid write in DIALOG_CreateIndirect after evil dialog destroys itself in WM_INITDIALOG