Ensure that even if FormatMessage fails we (a) don't crash, and (b) provide something useful.

Bugfix candidate.