Well, you are probably right, but I would like to check a few additional things as well via a trojan.
but understanding how it displays the overlay will help if you're going to attempt to dump the rom data to the screen won't it? ;-) (assuming it's internal rom)