Crash in win32k

Rev. 26583.

ntoskrnl/ps/kill.c:1188 (NtTerminateProcess@8)
ntoskrnl/ps/kill.c:964 (PspTerminateThreadByPointer@12)
ntoskrnl/ps/kill.c:694 (PspExitThread@4)
subsystems/win32/win32k/main/dllmain.c:279 (Win32kThreadCallback@8)
subsystems/win32/win32k/ntuser/window.c:662 (@co_DestroyThreadWindows@4)
subsystems/win32/win32k/ntuser/window.c:2195 (@co_UserDestroyWindow@4)
subsystems/win32/win32k/ntuser/winpos.c:1431 (@co_WinPosShowWindow@8)
subsystems/win32/win32k/ntuser/winpos.c:698 (@co_WinPosSetWindowPos@28)
subsystems/win32/win32k/ntuser/window.c:202 (@IntWinListChildren@4)

or:

subsystems/win32/win32k/ntuser/message.c:1039 (NtUserGetMessage@16)
subsystems/win32/win32k/ntuser/message.c:929 (@co_IntWaitMessage@12)
subsystems/win32/win32k/ntuser/message.c:727 (@co_IntPeekMessage@20)
subsystems/win32/win32k/ntuser/msgqueue.c:1243 (co_MsqFindMessage@28)
subsystems/win32/win32k/ntuser/msgqueue.c:618 (co_MsqPeekHardwareMessage@24)
subsystems/win32/win32k/ntuser/msgqueue.c:271 (co_MsqTranslateMouseMessage@40)

UserGetWindowObject(IntGetDesktopWindow()) returns NULL because of 0 != (Window->Status & WINDOWSTATUS_DESTROYED) condition.