Fix the NTSTATUS_FROM_WIN32 macro parameter

The pattern declared a literal parameter, "(x)", while the body used
%1, so the macro never matched a call and every use failed with

  error 017: undefined symbol "NTSTATUS_FROM_WIN32"

The line directly above it, FILTER_FLT_NTSTATUS_FROM_HRESULT, has the
pattern right.

Verified against the generated code: NTSTATUS_FROM_WIN32(5) now folds
to ffffffffc0070005 and 0x1234 to ffffffffc0071234, matching the SDK's
__NTSTATUS_FROM_WIN32, and a Win32 code of 0 still maps to 0.