Is it possible to extract the firmware and instead modify the blob? Or is the NV firmware cryptographically encrypted to disable such methods of tampering?

Even if you could modify the firmware, the RAM size being a compile time constant means it probably affects the memory map, all kinds of cache layouts, etc.