This is a great starting point to go looking for PSP / SMM backdoors.