Win32 extract: Some refactoring; set security on handle, not path