Thanks for the suggestion, but EmmcHaccGen generates a completely fresh SYSTEM partition from the official firmware NCA files - it doesn't read or restore the old corrupted data. TegraExplorer confirms the SYSTEM partition is healthy: 119 NCA files in Contents/registered, all BIS-decryptable...