The timer callback SalTimerProc can be called after DeInitVCL has
deleted the SalInstance, and crash.  Avoid that by calling
WinSalTimer::Stop() and also using the INVALID_HANDLE_VALUE parameter
which waits until the timer callback is done executing.

Change-Id: Ia4cf2cf9dc48904d077e0a691e14107256c50ded