"interesting, int c3 handles the interrupt in an``unknown""module."
i would have run the volatility plugin apihooks to get this far, but unfortunately, the apihooks plugin currently does not support inline interrupt hooks.