Unchecked concatenation into windmc output filename

windmc builds an output filename from a user-controlled resource directory, basename, and language string, then appends components with strcpy/strcat after allocating a buffer whose size calculation is easy to get wrong. If any component length is underestimated or the directory string lacks a trailing separator, the resulting write can overflow the heap buffer during filename construction.