I know that when people wanted to make their own portal for the psp they set it up so that when wipeout tried to reach a cetain website a local machine caught the request and edited it. I was wondering.. hopefully not to newbie, If you could recreate this situation and figure out excatly where the psp is trying to go when it downloads an update.. Then set up a pc to have the same layout intercept it and rename the old dumped 1.0jap (using, not obtaining, just talking about dev), with the new name. Maybe that way the psp will believe it's an update and install that. As long as it doesn't like examine the file first..
Also with everything there is always a way to restore like all factory settings, why can't we focus on finding some sony repair guides or something and figure out what the keycode is or whatever that will reset it to 1.0jap because that firmware is propably built in on the mb of all of our psp's.... JUst thinking late at night it's all wrong anyways but tell me if you think it would work.