Normalization of Nt* Registry API Call Hive/Key Values in MAEC 4.0.1 Reports

This is a fix to normalize how registry hive and key values are captured in MAEC 4.0.1 reports. The native Nt* API calls use the syntax ```\Registry\<abbreviated hive identifier>\Key```, so this fix parses this out and properly converts into ```<full hive identifier>\Key```, e.g. ```HKEY_LOCAL_MACHINE\Key```. Doing so allows for correlation across all registry calls, Nt* and Reg*, observed by Cuckoo and reported in the MAEC output.