Inject unsecure code to ARM9 firmware update file to allow JTAG access

I have an ARM9 based circuit which has a method to upload a new firmware file to it. I have the firmware file and can upload it into the ARM9. However there is also a bootloader which is not part of the firmware and is located in bank 1 and the ARM9 boots from bank 1. The firmware gets copied to bank 0. I want to do a complete memory dump using JTAG but the ARM9 has the security flag set which prevents this. So basically what I want is someone to inject code into the firmware file, which I supply, and then when uploaded into the ARM9, gets called from the bootloader and would clear the security flag and allow me to access the ARM9 memory using a JTAG interface. I need someone who has a good understanding of the ARM9 and writing assembly code for embedded devices and decompiling code in embedded devices and hex/bin files etc, as I also need other work done including writing code which would allow me to read and write to an external NAND flash IC connected to the ARM9. I also have other related work needed in regards to the ARM9. But first I need this done to be able to do JTAG memory dump and then go from there. The firmware file may be compressed and/or encrypted, I am not sure. I have included the firmware file and I need it done urgently and I am willing to pay reasonable price to anyone who can do what I ask. If you look at the file and can do it straight away then do it and let me know and I can organize payment to you straight away.