Thank you very much for the explanation and for providing the complete 7I76 firmware image.
That clarifies the architecture and recovery path perfectly.
I will try external programming on my side based on this.
If I run into anything unclear, I may follow up.