I tested xell on an 8955 ages ago with jtag wiring when i was bored. i had xell running for 1 second then it went to red lights 0022 i think, so the jtag ports must still be functional.
what i dont understand is the process of what happens when it tries to boot the modified flash, it must check a backup or a hash or something and realize its not the same.
There must be a way to trick the system into booting xell and tell the cpu im an unmodified m$ nand flash.
you are an idiot if you think its that easy.
the cpu checks its fuselines on boot and the fuseline that allows the modified 4xxx kernal is burned, so the hacked kernal cant load. this is hardware based, so no software can bypass it.
the 0022 error doenst mean $#!t with the jtag ports, it means that the system cannot load the modified SMC in flash.
trust me many more skilled people that you have exhausted all ways to crack the kernal with no success yet.
read up a bit more about this stuff before you embarrass yourself again with a dumb post.