[NTUSER] MENU_HideSubPopups: Check ValidateHwndNoErr return value

Check if the return value is not NULL before calling co_UserDestroyWindow.
CORE-19367

win32ss/user/ntuser/menu.c

@@ -3282,11 +3282,9 @@ static void FASTCALL MENU_HideSubPopups(PWND pWndOwner, PMENU Menu,
       {
           PWND pWnd;
           if (!VerifyMenu(Item->spSubMenu)) return;
-          pWnd = ValidateHwndNoErr(Item->spSubMenu->hWnd);
           MENU_HideSubPopups(pWndOwner, Item->spSubMenu, FALSE, wFlags);
           MENU_SelectItem(pWndOwner, Item->spSubMenu, NO_SELECTED_ITEM, SendMenuSelect, NULL);
           TRACE("M_HSP top p hm %p  pWndOwner IDMenu %p\n",top_popup_hmenu,pWndOwner->IDMenu);
-          co_UserDestroyWindow(pWnd);
 
           /* Native returns handle to destroyed window */
           if (!(wFlags & TPM_NONOTIFY))
@@ -3298,6 +3296,10 @@ static void FASTCALL MENU_HideSubPopups(PWND pWndOwner, PMENU Menu,
           // Call WM_UNINITMENUPOPUP FIRST before destroy!!
           // Fixes todo_wine User32 test menu.c line 2239 GetMenuBarInfo callback....
           //
+          pWnd = ValidateHwndNoErr(Item->spSubMenu->hWnd);
+          if (pWnd)
+             co_UserDestroyWindow(pWnd);
+
           Item->spSubMenu->hWnd = NULL;
           ////
       }