For some applications the shortcut's icon points to a .exe file which in
fact contains a .ico file. This means open_icon() cannot rely on the
file extension.  Also reject icon streams that don't actually contain a
valid icon and use the next source as a fallback.