Okay, I have learned alot of .prx and data.psp and data.psar. I have also noticed data.psar has all the files required to go into the PSP flash chip. But before trying my "crazy idea" we should do this safely. My idea is to build an eboot.pbp. But not any "normal" one, but one that has .prx and certificates (if needed), etc to make a hybrid (custom) firmware. Build it into the data.psar. But this is where my idea kicks in. Why cant me KXploit the eboot then run it? Or do the swaploit? It might work... But to try this safely, and to see if it works, what must be done, is get a ver2.0 update eboot, rebuild it with just the data.psar, and take out the security thing, (i think its the data.psp) and KXploit. If it successfully flashes the PSP, then we can build hybrid firmwares with this. If not, oh well. Also, if someone can rebuild the eboot, I wil gladly risk my PSP (after I get my 1 yr warrenty on it :) ) and try this out. Give feedback, tell my WHY this might work/not work, and hope to god this may work!