I was wondering if it would be possible to some how dump the pre-ipl before booting the PSP.

Can you use a bus pirate (Or other methods/Hardware) to read the Pre-IPL when the PSP boots then dump and decrypt it?
^That is if the stream isn't encrypted

Maybe it's possible with the right tools =\

- Source: TA-088v3