carrier-explode iOS carrier and country bundles
iOS version
CarriersPolicy filesPowerNetwork databasesConfigsDiff

Mav25-1.20.06.Release.bbfw

Load order: the modem's built-in config, then bbcfg.mbn's per-platform defaults, then the bundle's .der.pri.

Carriers with band combos (11)

From band_combos_per_plmn.xml, with the bundles the OTA manifest routes each PLMN to.

ATTTMOVZWKDDI-LEGACYKDDIUS_CELLULARSOFTBANKUNICOM_CNCMCCCHINATELECOM_CNCBN_CN

ATT

PLMN 310-150310-280310-380310-410313-100
Bundles ATT_FirstNet_USATT_USATT_aio_US
12 MVNO bundles on these PLMNs ATT_CC_USATT_Defense_USATT_Dish_MVNO_USATT_KORE_USATT_NR_USATT_Puretalk_USATT_RedPocket_USATT_TFW_USATT_aio_NR_USBootstrap_ATT_USGigSky_SIM_USGigSky_US
PlatformsCombosEN-DCNRLTENR-DCMax CCNR bandsLTE anchors
P1P4P5P6 4592062530265n2 n5 n66 n77
FR2 n258 n260		B2 B5 B12 B14 B29 B30 B66

TMO

PLMN 310-160310-200310-210310-220310-230310-240310-250310-260310-270310-310310-490310-660310-800311-660311-882
Bundles TMobile_US
14 MVNO bundles on these PLMNs Dish_MVNO_USDish_Ting_USFamilyMobile_USRoamMobility_USTMobile_Boost_USTMobile_CC_USTMobile_Charter_USTMobile_Comcast_USTMobile_MVNO_USTMobile_MetroPCS_USTMobile_TFW_Simple_USTMobile_UltraMint_USTMobile_Vodafone_USTMobile_Wholesale_US
PlatformsCombosEN-DCNRLTENR-DCMax CCNR bandsLTE anchors
P1 688796090195n25 n41 n48 n66 n71 n77
FR2 n258 n260 n261		B2 B12 B48 B66 B71
P4P6 699796200195n25 n41 n48 n66 n71 n77
FR2 n258 n260 n261		B2 B12 B48 B66 B71
P5 625795460196n25 n41 n48 n66 n71 n77
FR2 n258 n260 n261		B2 B12 B48 B66 B71

VZW

PLMN 311-480311-481311-482311-483311-484311-485311-486311-487311-488311-489310-590310-599
Bundles Verizon_LTE_US
14 MVNO bundles on these PLMNs Appalachian_LTE_USCellcom_LTE_USCopperValley_LTE_USPioneer_LTE_USTHC_LTE_USVerizon_Charter_LTE_USVerizon_Comcast_LTE_USVerizon_Core_Visible_LTE_USVerizon_Cox_LTE_USVerizon_MVNO_USVerizon_Response_LTE_USVerizon_TFW_LTE_USVerizon_Ting_LTE_USVerizon_Visible_LTE_US
PlatformsCombosEN-DCNRLTENR-DCMax CCNR bandsLTE anchors
P1P4P5P6 6521754770676n2 n5 n48 n66 n77
FR2 n260 n261		B2 B5 B13 B48 B66

KDDI-LEGACY

PLMN 440-51
Bundles KDDI_LTE_only_jp
3 MVNO bundles on these PLMNs KDDI_BIGLOBE_LTE_only_jpKDDI_JCOM_LTE_only_jpKDDI_UQ_LTE_only_jp
PlatformsCombosEN-DCNRLTENR-DCMax CCNR bandsLTE anchors
P1P4P5P6 23230005n3 n28 n41 n77B1 B3 B11 B18 B41 B42

KDDI

PLMN 440-54
Bundles KDDI_jp
2 MVNO bundles on these PLMNs KDDI_Povo_NR_jpKDDI_UQ_NR_jp
PlatformsCombosEN-DCNRLTENR-DCMax CCNR bandsLTE anchors
P1P4P5P6 582335005n3 n28 n40 n41 n77B1 B3 B11 B18 B41 B42

US_CELLULAR

PLMN 311-580311-588311-589
Bundles USCellular_LTE_US
1 MVNO bundles on these PLMNs Webbing
PlatformsCombosEN-DCNRLTENR-DCMax CCNR bandsLTE anchors
P1P4P5P6 1731667005n2 n5 n12 n41 n48 n66 n71 n77
FR2 n260 n261		B1 B2 B3 B5 B7 B8 B12 B41 B42 B48 B66 B71

SOFTBANK

PLMN 440-20
Bundles Softbank_jp
1 MVNO bundles on these PLMNs Softbank_YMobile_jp
PlatformsCombosEN-DCNRLTENR-DCMax CCNR bandsLTE anchors
P1P4P5P6 1465294005n1 n3 n28 n77B1 B3 B8 B11 B28 B42

UNICOM_CN

PLMN 460-01460-09
Bundles Unicom_cn
PlatformsCombosEN-DCNRLTENR-DCMax CCNR bandsLTE anchors
P1P4P5P6 632637005n1 n8 n78B1 B3 B5 B8

CMCC

PLMN 460-00460-02460-07460-08
Bundles CMCC_cn
PlatformsCombosEN-DCNRLTENR-DCMax CCNR bandsLTE anchors
P1P4P5P6 571245003n28 n41 n79B3 B8 B39 B40 B41

CHINATELECOM_CN

PLMN 460-11
Bundles ChinaTelecom_USIM_cn
PlatformsCombosEN-DCNRLTENR-DCMax CCNR bandsLTE anchors
P1P4P5P6 612635005n1 n78B1 B3 B5 B8

CBN_CN

PLMN 460-15
Bundles CBN_cn
PlatformsCombosEN-DCNRLTENR-DCMax CCNR bandsLTE anchors
P1P4P5P6 40535003n28 n41B3 B8 B39 B40 B41
Policy files (35)

Plaintext EFS files the package writes. A repeated path has one copy per platform or config.

PathFromServes
/policyman/carrier_policy.xml ROWbbcfg.mbnP1P4P5P6
/data/3gpp/data_3gpp_dynamic_config.xml bbcfg.mbnP1P4P5P6
/policyman/5g_roaming_feature_enabled.xml 5G Roaming feature enablementbbcfg.mbnP1P4P5P6
/policyman/5g_roaming_restriction.xml 5G roaming restrictionbbcfg.mbnP1P5P6
/policyman/5g_sa_roaming_feature_enabled.xml 5G SA Roaming feature enablementbbcfg.mbnP1P4P5P6
/policyman/5g_plus_5g_always.xml 5G Plus 5G Alwaysbbcfg.mbnP1P4P5P6
/policyman/5g_plus_5g_restriction.xml 5G Plus 5G Restrictionbbcfg.mbnP1P4P5P6
/policyman/5g_sa_allowed_on_ndds.xml 5G SA Allowed On NDDSbbcfg.mbnP1P4P5P6
/policyman/5g_msim_band_restriction.xml 5G MSIM Band Restrictionbbcfg.mbnP1P6
/policyman/l2nr_policy.xml LTE 2 NR PSHO Controlbbcfg.mbnP1P4P5P6
/policyman/band_combos_per_plmn.xml bbcfg.mbnP1
/policyman/5g_roaming_restriction.xml 5G roaming restrictionbbcfg.mbnP4
/policyman/5g_msim_band_restriction.xml 5G MSIM Band Restrictionbbcfg.mbnP4
/policyman/band_combos_per_plmn.xml bbcfg.mbnP4P6
/policyman/5g_msim_band_restriction.xml 5G MSIM Band Restrictionbbcfg.mbnP5
/policyman/band_combos_per_plmn.xml bbcfg.mbnP5
/nv/rfnv/64628.xml pt.mbnP1 ×4
/nv/rfnv/64628.xml pt.mbnP1 ×8P4 ×10P6 ×10
/nv/rfnv/64628.xml pt.mbnP4 ×10P5 ×8P6 ×10
/nv/rfnv/64628.xml pt.mbnP4 ×15P5 ×12P6 ×15
/nv/rfnv/64628.xml pt.mbnP5 ×8
/nv/rfnv/64628.xml pt.mbnP5 ×4
/policyman/generic_band_restrictions.xml Generic Band Restrictionsqdsp6sw.mbn DSDS-MN-Sariska
/policyman/nrdc_msim_concurrency.xml NRDC MSIM Concurrency bandsqdsp6sw.mbn DSDS-MN-Sariska
/policyman/hardware_band_filtering.xml qdsp6sw.mbn DSDS-MN-SariskaMSSS-MN-Sariska
/policyman/global_defines.xml Common Global Definitions for Post XMLsqdsp6sw.mbn DSDS-MN-Sariska
/policyman/pre.xml PRE XMLqdsp6sw.mbn DSDS-MN-SariskaMSSS-MN-Sariska
/policyman/pre.xml_Subscription01 PRE XMLqdsp6sw.mbn DSDS-MN-Sariska
/policyman/device_config.xml Dual SIM Device Configqdsp6sw.mbn DSDS-MN-Sariska
/policyman/policies.xml XML Orderingqdsp6sw.mbn DSDS-MN-Sariska
/policyman/generic_band_restrictions.xml Generic Band Restrictionsqdsp6sw.mbn MSSS-MN-Sariska
/policyman/global_defines.xml Common Global Definitions for Post XMLsqdsp6sw.mbn MSSS-MN-Sariska
/policyman/device_config.xml Single SIM Device Configqdsp6sw.mbn MSSS-MN-Sariska
/policyman/policies.xml XML Orderingqdsp6sw.mbn MSSS-MN-Sariska
/protected/mcfg/mcfg_sel_db.xml genericqdsp6sw.mbn /protected/mcfg/active_int_carrier_info
/policyman/5g_msim_band_restriction.xml xml, bbcfg.mbn, 6.6 KiB
condition action definition · underlined names explain themselves
=5G MSIM Band Restriction=$Change: XYZ $=1994.1.12
=global=5g_msim_restrict:disable_fr2_bands
=current
=current
=current
=current
=SUB6
=current
=SUB6
=current
=global=5g_msim_restrict:disable_sa_bands
=current
=current
=current
=none
=current
=current
=5g_msim_restrict:disable_fr2_bands
=5g_msim_restrict:disable_fr2_bands
=true
=this
=other
5G_PLUS_5G
=5g_msim_restrict:disable_fr2_bands
=5g_msim_restrict:disable_fr2_bands
=this
=other
=other
5G_PLUS_4G
=5g_msim_restrict:disable_sa_bands
=5g_msim_restrict:disable_sa_bands
true
=global:default_bands
=global:default_bands
NOT ONLINE
FULL
=home_mccs
=global:default_bands
=global:default_bands
=5g_sa_roaming_feature_enabled
=global:default_bands
=global:default_bands
=5g_nsa_roaming_feature_enabled
=global:disable_sa_bands
=global:disable_sa_bands
=SA=ROAMING
true
=global:disable_NR_bands
=SA=ROAMING
=NSA=ROAMING
=this
=other
=this
=5g_plus_5g_always
=global:china_mccs
=5g_msim_restrict:disable_fr2_bands
=5g_msim_restrict:disable_fr2_bands
=global:default_bands
=global:default_bands
=this
=other
=other
=5g_sa_allowed_on_ndds
=home_mccs
=global:pnw_mccs
5G_PLUS_5G
=dds=5g_msim_restrict:disable_fr2_bands
=dds=5g_msim_restrict:disable_fr2_bands
=ndds=5g_msim_restrict:disable_fr2_bands
=ndds=5g_msim_restrict:disable_fr2_bands
=5g_sa_allowed_on_ndds
5G_PLUS_4G
… 2
=true
=ndds=5g_msim_restrict:disable_fr2_bands
=ndds=5g_msim_restrict:disable_fr2_bands
=global:disable_NR_bands
=global:disable_NR_bands
Power: A-MPR network signalling

pt.mbn NV 64628: the NS value signalled per LTE band, without and with carrier aggregation, by MCC.

CountriesBandNSNS with CA
179 MCCs: Greece, Netherlands, Belgium, France, … 202 GR204 NL206 BE208 FR212 MC213 AD214 ES216 HU218 BA219 HR220 RS222 IT225 226 RO228 CH230 CZ231 SK232 AT234 GB235 238 DK240 SE242 NO244 FI246 LT247 LV248 EE250 RU255 UA257 BY259 MD260 PL262 DE266 GI268 PT270 LU272 IE274 IS276 AL278 MT280 CY282 GE283 AM284 BG286 TR288 289 290 GL292 293 SI294 MK295 LI297 ME308 PM340 MQ400 AZ401 KZ402 BT410 PK412 AF413 LK414 MM415 LB416 JO417 418 IQ419 KW420 SA421 422 OM424 AE425 IL426 BH427 QA428 MN429 NP430 431 432 434 UZ436 TJ437 KG438 452 VN454 HK455 MO456 KH457 LA466 TW470 BD472 MV502 MY505 AU510 ID514 TL515 PH520 TH525 SG528 BN530 NZ536 537 PG539 TO540 SB541 VU542 FJ543 545 546 NC547 PF548 550 551 552 PW553 555 602 EG603 DZ604 MA605 TN606 LY607 608 SN609 610 ML611 GN612 CI613 BF614 NE615 616 BJ617 MU618 LR619 SL620 GH621 NG622 TD623 CF624 CM625 626 627 628 GA629 CG630 CD631 AO632 GW633 SC634 635 RW636 637 638 639 KE640 TZ641 UG642 643 MZ645 ZM646 MG647 RE648 ZW649 NA650 MW651 LS652 BW653 654 655 ZA657 658 659 724 BR742 750 995 221 554 258
B413131
B428
57 MCCs: United States, 314, 315, 316, … 310 US311 US312 US313 US314 315 316 330 PR332 334 MX338 JM342 344 AG346 348 VG350 BM352 354 356 358 360 362 CW363 AW364 BS365 366 368 370 DO372 HT374 TT376 TC404 IN405 IN406 467 534 535 544 549 WS702 BZ704 GT706 SV708 HN710 NI712 CR714 PA716 PE722 AR730 CL732 CO734 VE736 BO738 GY740 EC744 PY746 SR748 UY
B302121
B4144
B482710
901 B155
B302121
B4144
B428
B482710
302 CanadaB302121
B4144
B482710
440 Japan441 B155
Serves P1 ×4
Network databases

Where 5G looks, by country mcc2arfcn.mdb

NR frequency ranges the modem scans per country. A band is named where one band holds every range.

CountryBandRange (MHz)NR-ARFCNKey
310 United States n773450–3549.99630000–636666200, 201
3699.99–3979.995646666–665333
310 United States n25824250.08–244502016667–2019999210
24750–25249.982024999–2033332
302 Canada n773450–3979.995630000–665333200, 201
Any country n28703–733.59uplink140600–146718189
717.41–748uplink143482–149600
758–788.59151600–157718
772.41–803154482–160600
Key: meaning unknown, not a band number.unnamed Serves DSDS-MN-SariskaMSSS-MN-Sariska

Features per network unnamed

plmn2features: feature id = value per network. The ids are unnamed.

NetworksDatabaseFeatures
440-51440-54 plmn2features.mdb1=22=24=26=27=211=212=213=217=219=224=225=227=228=229=233=237=238=239=240=278=677=247=649=250=276=264=665=266=275=269=270=273=274=20=2
440-20 plmn2features.mdb1=22=24=26=27=211=212=213=217=219=224=225=227=228=229=233=237=238=239=240=278=277=247=249=250=276=264=665=266=275=269=270=273=274=20=2

Modem settings

SettingValueServes
MCFG first-boot flag unverified
/mcfg_ftb
clear 0x0000000000000000 CUST_SW_DEFAULTCUST_HW_DEFAULTDSDS-MN-SariskaMSSS-MN-Sariska
Full-RAT fallback timer likely
/policyman/fullrat_timer
300 s before trying every technology; second value 155000 (unknown) 0x2c010000785d0200 DSDS-MN-SariskaMSSS-MN-Sariska
Device mode likely
/nv/item_files/modem/mmode/device_mode
dual SIM, dual standby (DSDS) 0x01 DSDS-MN-Sariska
Device mode likely
/nv/item_files/modem/mmode/device_mode
single SIM 0x00 MSSS-MN-Sariska
Active built-in carrier config likely
/protected/mcfg/active_int_carrier_info
SW_DEF 0x53575f44454600000000000000 all
Active built-in carrier config likely
/protected/mcfg/active_int_carrier_info
HW_DEF 0x48575f44454600000000000000 all
Modem configs and containers

Built into the modem image (qdsp6sw.mbn)

LabelTypeVersionCapabilityFiles
CUST_SW_DEFAULTSW0ae00001
1
/mcfg_ftb
CUST_HW_DEFAULTHW0ae10100
1
/mcfg_ftb
(unlabelled)SWee000103
2
/multi_mbn/HW-DSDS.mbn
/multi_mbn/HW-MSSS.mbn
DSDS-MN-SariskaHW0a00890041400020
13
/mcfg_ftb
/policyman/generic_band_restrictions.xml
/policyman/nrdc_msim_concurrency.xml
/policyman/hardware_band_filtering.xml
/policyman/global_defines.xml
/policyman/pre.xml
/policyman/pre.xml_Subscription01
/policyman/device_config.xml
/policyman/fullrat_timer
/mdb/nr/mcc2arfcn.mdb
/mdb/nr/plmn2features.mdb
/policyman/policies.xml
/nv/item_files/modem/mmode/device_mode
MSSS-MN-SariskaHW0a00890040400020
11
/mcfg_ftb
/policyman/generic_band_restrictions.xml
/policyman/global_defines.xml
/policyman/hardware_band_filtering.xml
/policyman/pre.xml
/policyman/device_config.xml
/policyman/fullrat_timer
/mdb/nr/mcc2arfcn.mdb
/mdb/nr/plmn2features.mdb
/policyman/policies.xml
/nv/item_files/modem/mmode/device_mode
/protected/mcfg/active_int_carrier_infoSW0a000000
1
/protected/mcfg/active_int_carrier_info
/protected/mcfg/active_int_carrier_infoHW0a000000
2
/protected/mcfg/active_int_carrier_info
/protected/mcfg/mcfg_sel_db.xml
What bbcfg.mbn holds (10 blob types)
TypeNameBlobsRecordsHolds
1DFLT_CAL?unverified19114RF defaults/calibration NV list, VTNV/zlib values
4STAT_NV?unverified81114RF static NV list
7STAT_CFG?likely25108MAVZ MCFG HW image, /rfc/<id>_0_{res,cmn}.dat (sub-6 RF card)
8RFFE_DEV18113EFS /rfc/device_settings/*
9RFFE_LUT113113EFS /rfc/device_lut/*
10RFC_MMW823MAVZ MCFG HW image, /rfc/29xx (mmWave RF card)
13PROT_SKU?unverified3119MAVZ 64 KiB binary table
15PROT_NV44protocol static NV/EFS
17PROT_PRI44product PRI defaults: /policyman/*.xml, /data/3gpp/*.xml
20SHPNG11common shipping settings
What pt.mbn holds (2 blob types)
TypeNameBlobsRecordsHolds
22PA_CHAR?unverified18131pt.mbn RFNV 646xx power tables
24PA_CHAR?unverified18114pt.mbn RFNV 646xx incl. A-MPR NS XML (NV 64628)
MCFG images in the containers (33)
BlobTypeServesCfgVersionLabelFiles
bbcfg.mbn #7STAT_CFG?P1 HW0000000ageneric_config_label3
bbcfg.mbn #13STAT_CFG?P1 HW0000000ageneric_config_label3
bbcfg.mbn #17STAT_CFG?P1P4 ×2P6 HW0000000ageneric_config_label3
bbcfg.mbn #20RFC_MMWP1 HW0000000ageneric_config_label3
bbcfg.mbn #23STAT_CFG?P1 ×2P4 ×2P6 HW0000000ageneric_config_label3
bbcfg.mbn #28STAT_CFG?P1P4 ×2P6 HW0000000ageneric_config_label3
bbcfg.mbn #39RFC_MMWP4 ×2 HW0000000ageneric_config_label3
bbcfg.mbn #44STAT_CFG?P4 ×2P6 HW0000000ageneric_config_label3
bbcfg.mbn #47STAT_CFG?P4 ×2P6 HW0000000ageneric_config_label3
bbcfg.mbn #59STAT_CFG?P4 ×2P6 HW0000000ageneric_config_label3
bbcfg.mbn #62RFC_MMWP4 ×2 HW0000000ageneric_config_label3
bbcfg.mbn #64STAT_CFG?P4 ×2P6 HW0000000ageneric_config_label3
bbcfg.mbn #67STAT_CFG?P4 ×2P6 HW0000000ageneric_config_label3
bbcfg.mbn #70STAT_CFG?P4 ×2P6 HW0000000ageneric_config_label3
bbcfg.mbn #73STAT_CFG?P4 ×2P6 HW0000000ageneric_config_label3
bbcfg.mbn #77STAT_CFG?P4 ×3P6 ×5 HW0000000ageneric_config_label3
bbcfg.mbn #80RFC_MMWP4 ×3 HW0000000ageneric_config_label3
bbcfg.mbn #83STAT_CFG?P4 ×3P6 ×5 HW0000000ageneric_config_label3
bbcfg.mbn #87STAT_CFG?P4 ×3P6 ×5 HW0000000ageneric_config_label3
bbcfg.mbn #91STAT_CFG?P4 ×3P6 ×5 HW0000000ageneric_config_label3
bbcfg.mbn #94STAT_CFG?P4 ×3P6 ×5 HW0000000ageneric_config_label3
bbcfg.mbn #124STAT_CFG?P5 ×3 HW0000000ageneric_config_label3
bbcfg.mbn #127RFC_MMWP5 ×5 HW0000000ageneric_config_label3
bbcfg.mbn #131STAT_CFG?P5 ×3 HW0000000ageneric_config_label3
bbcfg.mbn #134STAT_CFG?P5 ×3 HW0000000ageneric_config_label3
bbcfg.mbn #137STAT_CFG?P5 ×3 HW0000000ageneric_config_label3
bbcfg.mbn #156STAT_CFG?P5 ×5 HW0000000ageneric_config_label3
bbcfg.mbn #160STAT_CFG?P5 ×5 HW0000000ageneric_config_label3
bbcfg.mbn #163STAT_CFG?P5 ×5 HW0000000ageneric_config_label3
bbcfg.mbn #166STAT_CFG?P5 ×5 HW0000000ageneric_config_label3
bbcfg.mbn #171RFC_MMWP5 ×3 HW0000000ageneric_config_label3
bbcfg.mbn #213RFC_MMWP6 ×4 HW0000000ageneric_config_label3
bbcfg.mbn #235RFC_MMWP6 ×3 HW0000000ageneric_config_label3
NV/EFS defaults (9 sets)
PROT_NV · 22 items P1
ItemWhat it isValue
/mav/bbcfg_file_hash_protocol_static_nvbbcfg_file_hash_protocol_static_nv likely
Baseband defaults digest: Digest of the bbcfg.mbn blob these defaults came from, kept in EFS so the modem knows which set it holds
0x1efa4a8bdb66657637e8444cadb99d9043ec19c6
/nv/item_files/gps/cgps/sm/aagps_positioning_modes_supported_extaagps_positioning_modes_supported_ext unverified
GNSS setting: GNSS / location
0x0000000000000000
/nv/item_files/gps/cgps/me/gnss_me_b1c_track_controlgnss_me_b1c_track_control unverified
GNSS setting: GNSS / location
0x00000000
/nv/item_files/gps/cgps/me/gnss_multiband_configurationgnss_multiband_configuration unverified
GNSS setting: GNSS / location
0x27000000
/nv/item_files/modem/nr5g/RRC/cap_control_pc1dot5cap_control_pc1dot5 likely
NR UE capability: NR RRC UE-capability toggle
0x01
/nv/item_files/modem/nr5g/RRC/cap_control_pc1dot5_per_plmncap_control_pc1dot5_per_plmn likely
NR UE capability: NR RRC UE-capability toggle
0x08ffffff000013f0ff010013f1ff010013f2ff010013f3ff010013f4ff010013…
/nv/item_files/modem/nr5g/RRC/cap_pc2_control_v2cap_pc2_control_v2 likely
NR UE capability: NR RRC UE-capability toggle
0x25ffffff000013f0ff010113f1ff010113f2ff010113f3ff010113f4ff010113…
/nv/item_files/modem/nr5g/ML1/srch_sensor_bmsrch_sensor_bm unverified
NR5G setting: NR5G RRC / L1
0x0101
/nv/item_files/mcs/lmtsmgr/vbatt/vbatt_lte_limitvbatt_lte_limit likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x02007800e900cf00df00cb00ff0ab80b3200dc00c200d200be006e0a270b3200…
/nv/item_files/mcs/lmtsmgr/vbatt/vbatt_nr5g_limitvbatt_nr5g_limit likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x0200b600e900cf00df00cb00ff0ab80b3200dc00c200d200be006e0a270b3200…
/nv/item_files/mcs/lmtsmgr/vbatt/vbatt_gsm_limitvbatt_gsm_limit likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x02002b002a011b013b013b01ff0ab80b32001d010e013b013b016e0a270b3200…
/nv/item_files/modem/nr5g/ML1/fc_bcl_slow_path_extfc_bcl_slow_path_ext unverified
NR5G setting: NR5G RRC / L1
0x00020000
/nv/item_files/modem/mcs/cfcm/ezefs/cfcm_monitor_timerscfcm_monitor_timers likely
CFCM flow control: Central flow control for thermal, CPU and DDR-bandwidth mitigation
0x0100000000e80300000100000064000000
/nv/item_files/modem/nr5g/RRC/cap_control_ul_mimo_per_plmncap_control_ul_mimo_per_plmn likely
NR UE capability: NR RRC UE-capability toggle
0x09ffffff0064f0ff0113f0ff0113f1ff0113f2ff0113f3ff0113f4ff0113f5ff…
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/mmode/sd/mcc_list_emerg_call_full_srvmcc_list_emerg_call_full_srv unverified
Multimode setting: Call manager / system determination
0xb8010000b9010000000000000000000000000000
NV 68760x0000000005
NV 68760x0000000005
NV 68760x0000000005
NV 1920AAGPS Positioning Modes Supported likely0x29040000
NV 70x3000
NV 80x69
PROT_PRI · 23 items P1
ItemWhat it isValue
/mav/product_pri_setting_revisionProduct PRI revision likely
Revision of the product PRI settings the modem last wrote to EFS
1.0.10 0x01000a00
/mav/product_pri_setting_efidiag_revisionProduct PRI EFI-diag revision likely
Revision of the EFI-diag part of the product PRI settings
1.0.6 0x01000600
/nv/item_files/modem/maverick/test/mav_test_efs_size_1mav_test_efs_size_1 likely
Apple test item: Modem EFS test item (fixed pattern)
0x05
/nv/item_files/modem/maverick/test/mav_test_efs_size_2mav_test_efs_size_2 likely
Apple test item: Modem EFS test item (fixed pattern)
0x0605
/nv/item_files/modem/maverick/test/mav_test_efs_size_4mav_test_efs_size_4 likely
Apple test item: Modem EFS test item (fixed pattern)
0x08040201
/nv/item_files/modem/nr5g/RRC/failure_mgr_efs_list_cfgfailure_mgr_efs_list_cfg unverified
NR5G setting: NR5G RRC / L1
0x01042c012c0105042c012c0105042c010400780078000500
/nv/item_files/modem/lte/rrc/efs/data_inactivity_controldata_inactivity_control unverified
LTE setting: LTE RRC / L1 / L2
0x01000000140000003075000060ea0000c0d40100
/nv/item_files/modem/lte/rrc/efs/lfs_sort_per_band_priolfs_sort_per_band_prio unverified
LTE setting: LTE RRC / L1 / L2
0x01006e00
/nv/item_files/modem/lte/rrc/efs/cust_signature_scg_failure_info_nrcust_signature_scg_failure_info_nr unverified
LTE setting: LTE RRC / L1 / L2
0x0100
/nv/item_files/modem/lte/ML1/fr2_priority_optimizationfr2_priority_optimization unverified
LTE setting: LTE RRC / L1 / L2
0x01000000960000002800000000000000
/nv/item_files/gps/cgps/sm/aagps_positioning_modes_supported_extaagps_positioning_modes_supported_ext unverified
GNSS setting: GNSS / location
0x0100000000000000
/nv/item_files/modem/nr5g/RRC/cap_control_t_plus_f_band_combosNR TDD+FDD combo control likely
Enables NR-CA/NR-DC TDD+FDD band-combo classes
0x07
/nv/item_files/modem/mav/mav_cm_cs_shutdown_plmn_listCS shutdown PLMNs likely
PLMNs whose 2G/3G circuit-switched network is shut down (count byte, then 3-byte BCD PLMNs)
0x0413005113008213008313001400000000000000000000000000000000000000…
/nv/item_files/modem/nr5g/RRC/cap_srs_carrier_switch_per_plmn_control_v2cap_srs_carrier_switch_per_plmn_control_v2 likely
NR UE capability: NR RRC UE-capability toggle
0x02ffffff000064f0ff0101000000000000000000000000000000000000000000…
/nv/item_files/modem/nr5g/RRC/cap_feature_band_nrNR band capability likely
NR band feature-capability list; proprietary layout
0xff02ff02
/nv/item_files/modem/mmode/mode_prefmode_pref unverified
Multimode setting: Call manager / system determination
0x5c000000
/mav/mav_police_pri_mode_pref_maskMode preference police mask unverified
Apple mask over the PRI mode preference
0x5c000000
/nv/item_files/modem/nr5g/RRC/cre_scg_custom_signal_enablecre_scg_custom_signal_enable unverified
NR5G setting: NR5G RRC / L1
0x01
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/lte/rrc/bbq/fake_enodeb_exception_plmn_listFake eNodeB exception PLMNs likely
PLMNs exempt from fake-eNodeB mitigation (count byte, then 3-byte BCD PLMNs)
0x0c13003813001213031205f59503222703322735f03144f05537f09205f51117…
/nv/item_files/modem/mmode/ext_ims_emerg_suppext_ims_emerg_supp unverified
Multimode setting: Call manager / system determination
0x01
/nv/item_files/modem/nr5g/RRC/cap_enable_pl_infocap_enable_pl_info likely
NR UE capability: NR RRC UE-capability toggle
0x00
NV 1920AAGPS Positioning Modes Supported likely0x29040000
PROT_NV · 24 items P4
ItemWhat it isValue
/mav/bbcfg_file_hash_protocol_static_nvbbcfg_file_hash_protocol_static_nv likely
Baseband defaults digest: Digest of the bbcfg.mbn blob these defaults came from, kept in EFS so the modem knows which set it holds
0xa04a8b9eaaeb97bb3be46f3b49377cbd08cb109e
/nv/item_files/gps/cgps/sm/aagps_positioning_modes_supported_extaagps_positioning_modes_supported_ext unverified
GNSS setting: GNSS / location
0x0100100000000000
/nv/item_files/gps/cgps/common/gnss_non_std_cfggnss_non_std_cfg unverified
GNSS setting: GNSS / location
0x0100000000000000
/nv/item_files/gps/cgps/sm/tm_config_agnss_transmission_delaytm_config_agnss_transmission_delay unverified
GNSS setting: GNSS / location
0x0000000000000000000000000000000000000000000000000000000000000000…
/nv/item_files/modem/nr5g/RRC/cap_control_pc1dot5cap_control_pc1dot5 likely
NR UE capability: NR RRC UE-capability toggle
0x01
/nv/item_files/modem/nr5g/RRC/cap_control_pc1dot5_per_plmncap_control_pc1dot5_per_plmn likely
NR UE capability: NR RRC UE-capability toggle
0x08ffffff000013f0ff010013f1ff010013f2ff010013f3ff010013f4ff010013…
/nv/item_files/modem/nr5g/RRC/cap_pc2_control_v2cap_pc2_control_v2 likely
NR UE capability: NR RRC UE-capability toggle
0x25ffffff000013f0ff010113f1ff010113f2ff010113f3ff010113f4ff010113…
/nv/item_files/modem/nr5g/ML1/srch_sensor_bmsrch_sensor_bm unverified
NR5G setting: NR5G RRC / L1
0x0101
/nv/item_files/mcs/lmtsmgr/vbatt/vbatt_lte_limitvbatt_lte_limit likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x0200780011001100110011000000000000000000ff0ab80b32001e001e001e00…
/nv/item_files/mcs/lmtsmgr/vbatt/vbatt_nr5g_limitvbatt_nr5g_limit likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x0200b60011001100110011000000000000000000ff0ab80b32001e001e001e00…
/nv/item_files/mcs/lmtsmgr/vbatt/vbatt_gsm_limitvbatt_gsm_limit likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x02002b0034013401000000000000000000000000ff0ab80b3200270127010000…
/nv/item_files/modem/nr5g/ML1/fc_bcl_slow_path_extfc_bcl_slow_path_ext unverified
NR5G setting: NR5G RRC / L1
0x00020000
/nv/item_files/modem/mcs/cfcm/ezefs/cfcm_monitor_timerscfcm_monitor_timers likely
CFCM flow control: Central flow control for thermal, CPU and DDR-bandwidth mitigation
0x0100000000e80300000100000064000000
/nv/item_files/modem/nr5g/RRC/cap_control_ul_mimo_per_plmncap_control_ul_mimo_per_plmn likely
NR UE capability: NR RRC UE-capability toggle
0x09ffffff0064f0ff0113f0ff0113f1ff0113f2ff0113f3ff0113f4ff0113f5ff…
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/mmode/sd/mcc_list_emerg_call_full_srvmcc_list_emerg_call_full_srv unverified
Multimode setting: Call manager / system determination
0xb8010000b9010000000000000000000000000000
/nv/item_files/mcs/trm/asdiv_antenna_disable_for_freq_rangeasdiv_antenna_disable_for_freq_range unverified
TRM setting: RF chain arbitration and antenna switch diversity
0x0102db00430960090101db004309600901029f004309600901019f0043096009
/nv/item_files/modem/mmode/qmi/qet_sleep_guard_timerqet_sleep_guard_timer unverified
Multimode setting: Call manager / system determination
0x01000000
NV 68760x0000000005
NV 68760x0000000005
NV 68760x0000000005
NV 1920AAGPS Positioning Modes Supported likely0x29040000
NV 70x3000
NV 80x69
PROT_PRI · 26 items P4
ItemWhat it isValue
/mav/product_pri_setting_revisionProduct PRI revision likely
Revision of the product PRI settings the modem last wrote to EFS
1.0.11 0x01000b00
/mav/product_pri_setting_efidiag_revisionProduct PRI EFI-diag revision likely
Revision of the EFI-diag part of the product PRI settings
1.0.7 0x01000700
/nv/item_files/modem/maverick/test/mav_test_efs_size_1mav_test_efs_size_1 likely
Apple test item: Modem EFS test item (fixed pattern)
0x05
/nv/item_files/modem/maverick/test/mav_test_efs_size_2mav_test_efs_size_2 likely
Apple test item: Modem EFS test item (fixed pattern)
0x0605
/nv/item_files/modem/maverick/test/mav_test_efs_size_4mav_test_efs_size_4 likely
Apple test item: Modem EFS test item (fixed pattern)
0x08040201
/nv/item_files/modem/nr5g/RRC/failure_mgr_efs_list_cfgfailure_mgr_efs_list_cfg unverified
NR5G setting: NR5G RRC / L1
0x01042c012c0105042c012c0105042c010400780078000500
/nv/item_files/modem/lte/rrc/efs/data_inactivity_controldata_inactivity_control unverified
LTE setting: LTE RRC / L1 / L2
0x01000000140000003075000060ea0000c0d40100
/nv/item_files/modem/lte/rrc/efs/lfs_sort_per_band_priolfs_sort_per_band_prio unverified
LTE setting: LTE RRC / L1 / L2
0x01006e00
/nv/item_files/modem/lte/rrc/efs/cust_signature_scg_failure_info_nrcust_signature_scg_failure_info_nr unverified
LTE setting: LTE RRC / L1 / L2
0x0100
/nv/item_files/modem/lte/ML1/fr2_priority_optimizationfr2_priority_optimization unverified
LTE setting: LTE RRC / L1 / L2
0x01000000960000002800000000000000
/nv/item_files/gps/cgps/sm/aagps_positioning_modes_supported_extaagps_positioning_modes_supported_ext unverified
GNSS setting: GNSS / location
0x0100100000000000
/nv/item_files/modem/nr5g/RRC/cap_control_t_plus_f_band_combosNR TDD+FDD combo control likely
Enables NR-CA/NR-DC TDD+FDD band-combo classes
0x07
/nv/item_files/modem/mav/mav_cm_cs_shutdown_plmn_listCS shutdown PLMNs likely
PLMNs whose 2G/3G circuit-switched network is shut down (count byte, then 3-byte BCD PLMNs)
0x0413005113008213008313001400000000000000000000000000000000000000…
/nv/item_files/modem/nr5g/RRC/cap_srs_carrier_switch_per_plmn_control_v2cap_srs_carrier_switch_per_plmn_control_v2 likely
NR UE capability: NR RRC UE-capability toggle
0x02ffffff000064f0ff0101000000000000000000000000000000000000000000…
/nv/item_files/modem/nr5g/RRC/cap_feature_band_nrNR band capability likely
NR band feature-capability list; proprietary layout
0xff02ff02
/nv/item_files/modem/mmode/mode_prefmode_pref unverified
Multimode setting: Call manager / system determination
0x5c000000
/mav/mav_police_pri_mode_pref_maskMode preference police mask unverified
Apple mask over the PRI mode preference
0x5c000000
/nv/item_files/modem/nr5g/RRC/cre_scg_custom_signal_enablecre_scg_custom_signal_enable unverified
NR5G setting: NR5G RRC / L1
0x01
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/lte/rrc/bbq/fake_enodeb_exception_plmn_listFake eNodeB exception PLMNs likely
PLMNs exempt from fake-eNodeB mitigation (count byte, then 3-byte BCD PLMNs)
0x0c13003813001213031205f59503222703322735f03144f05537f09205f51117…
/nv/item_files/modem/mmode/ext_ims_emerg_suppext_ims_emerg_supp unverified
Multimode setting: Call manager / system determination
0x01
/nv/item_files/modem/lte/rrc/efs/conn_rel_due_to_cap_ulm_timerconn_rel_due_to_cap_ulm_timer unverified
LTE setting: LTE RRC / L1 / L2
0x204e
/nv/item_files/modem/lte/rrc/efs/advanced_rel_ver_advtz_retry_thresadvanced_rel_ver_advtz_retry_thres unverified
LTE setting: LTE RRC / L1 / L2
0x02
/nv/item_files/modem/lte/rrc/efs/reg_fail_rel_ver_adpt_paramreg_fail_rel_ver_adpt_param unverified
LTE setting: LTE RRC / L1 / L2
0x204e0200
/nv/item_files/modem/nr5g/RRC/cap_enable_pl_infocap_enable_pl_info likely
NR UE capability: NR RRC UE-capability toggle
0x00
NV 1920AAGPS Positioning Modes Supported likely0x29040000
PROT_NV · 38 items P5
ItemWhat it isValue
/mav/bbcfg_file_hash_protocol_static_nvbbcfg_file_hash_protocol_static_nv likely
Baseband defaults digest: Digest of the bbcfg.mbn blob these defaults came from, kept in EFS so the modem knows which set it holds
0x7354e4ed4c6eaa01d5d9d3944bf8d45b8d2b75eb
/nv/item_files/gps/cgps/sm/aagps_positioning_modes_supported_extaagps_positioning_modes_supported_ext unverified
GNSS setting: GNSS / location
0x0100100000000000
/nv/item_files/gps/cgps/me/gnss_me_b1c_track_controlgnss_me_b1c_track_control unverified
GNSS setting: GNSS / location
0x00000000
/nv/item_files/gps/cgps/sm/tm_config_agnss_transmission_delaytm_config_agnss_transmission_delay unverified
GNSS setting: GNSS / location
0xd0070000d0070000d0070000d0070000d0070000d0070000d0070000d0070000…
/nv/item_files/mcs/lmtsmgr/gnss/gnss_nr_configgnss_nr_config likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x00000000850000000000000098929800000000000f00000001000000ffff0000…
/nv/item_files/mcs/lmtsmgr/gnss/gnss_nr_imd_configgnss_nr_imd_config likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0xb80000007a00000002000000b600000078000000010000000100000002000000…
/cgps/nv/item_files/me/gnss_pga_backoff_configgnss_pga_backoff_config unverified
GNSS setting: GNSS / location
0x01000000
/nv/item_files/gps/cgps/me/gnss_bds_b2a_path_lossgnss_bds_b2a_path_loss unverified
GNSS setting: GNSS / location
0x2f
/nv/item_files/gps/cgps/me/gnss_gal_E5a_path_lossgnss_gal_E5a_path_loss unverified
GNSS setting: GNSS / location
0x32
/nv/item_files/gps/cgps/me/gnss_gal_path_lossgnss_gal_path_loss unverified
GNSS setting: GNSS / location
0x2d
/nv/item_files/gps/cgps/me/gnss_gps_L5_path_lossgnss_gps_L5_path_loss unverified
GNSS setting: GNSS / location
0x2f
/nv/item_files/gps/cgps/me/gnss_bds_b1c_path_lossgnss_bds_b1c_path_loss unverified
GNSS setting: GNSS / location
0x1a
/nv/item_files/gps/cgps/me/gnss_lte_controlgnss_lte_control unverified
GNSS setting: GNSS / location
0x01000000
/nv/item_files/modem/nr5g/RRC/cap_control_pc1dot5cap_control_pc1dot5 likely
NR UE capability: NR RRC UE-capability toggle
0x01
/nv/item_files/modem/nr5g/RRC/cap_control_pc1dot5_per_plmncap_control_pc1dot5_per_plmn likely
NR UE capability: NR RRC UE-capability toggle
0x08ffffff000013f0ff010013f1ff010013f2ff010013f3ff010013f4ff010013…
/nv/item_files/modem/nr5g/RRC/cap_pc2_control_v2cap_pc2_control_v2 likely
NR UE capability: NR RRC UE-capability toggle
0x25ffffff000013f0ff010113f1ff010113f2ff010113f3ff010113f4ff010113…
/nv/item_files/modem/nr5g/ML1/srch_sensor_bmsrch_sensor_bm unverified
NR5G setting: NR5G RRC / L1
0x0101
/nv/item_files/mcs/lmtsmgr/vbatt/vbatt_lte_limitvbatt_lte_limit likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x0200780011001100110011000000000000000000ff0ab80b32001e001e001e00…
/nv/item_files/mcs/lmtsmgr/vbatt/vbatt_nr5g_limitvbatt_nr5g_limit likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x0200b60011001100110011000000000000000000ff0ab80b32001e001e001e00…
/nv/item_files/mcs/lmtsmgr/vbatt/vbatt_gsm_limitvbatt_gsm_limit likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x02002b0034013401000000000000000000000000ff0ab80b3200270127010000…
/nv/item_files/modem/nr5g/ML1/fc_bcl_slow_path_extfc_bcl_slow_path_ext unverified
NR5G setting: NR5G RRC / L1
0x00020000
/nv/item_files/modem/mcs/cfcm/ezefs/cfcm_monitor_timerscfcm_monitor_timers likely
CFCM flow control: Central flow control for thermal, CPU and DDR-bandwidth mitigation
0x0100000000e80300000100000064000000
/nv/item_files/modem/nr5g/RRC/cap_control_ul_mimo_per_plmncap_control_ul_mimo_per_plmn likely
NR UE capability: NR RRC UE-capability toggle
0x09ffffff0064f0ff0113f0ff0113f1ff0113f2ff0113f3ff0113f4ff0113f5ff…
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/mmode/sd/mcc_list_emerg_call_full_srvmcc_list_emerg_call_full_srv unverified
Multimode setting: Call manager / system determination
0xb8010000b9010000000000000000000000000000
/nv/item_files/mcs/trm/asdiv_antenna_disable_for_freq_rangeasdiv_antenna_disable_for_freq_range unverified
TRM setting: RF chain arbitration and antenna switch diversity
0x0103db00430960090104db004309600901039f004309600901049f0043096009
/nv/item_files/modem/mmode/qmi/qet_sleep_guard_timerqet_sleep_guard_timer unverified
Multimode setting: Call manager / system determination
0x01000000
NV 68760x0000000005
NV 68760x0000000005
NV 68760x0000000005
NV 1920AAGPS Positioning Modes Supported likely0x29040000
NV 70x3000
NV 80x69
NV 4490x20
NV 49550xf0ff0bf9f0000564000c020001000000
NV 67630x2a
NV 67640x2a
NV 67650x2a
PROT_PRI · 26 items P5
ItemWhat it isValue
/mav/product_pri_setting_revisionProduct PRI revision likely
Revision of the product PRI settings the modem last wrote to EFS
1.0.11 0x01000b00
/mav/product_pri_setting_efidiag_revisionProduct PRI EFI-diag revision likely
Revision of the EFI-diag part of the product PRI settings
1.0.7 0x01000700
/nv/item_files/modem/maverick/test/mav_test_efs_size_1mav_test_efs_size_1 likely
Apple test item: Modem EFS test item (fixed pattern)
0x05
/nv/item_files/modem/maverick/test/mav_test_efs_size_2mav_test_efs_size_2 likely
Apple test item: Modem EFS test item (fixed pattern)
0x0605
/nv/item_files/modem/maverick/test/mav_test_efs_size_4mav_test_efs_size_4 likely
Apple test item: Modem EFS test item (fixed pattern)
0x08040201
/nv/item_files/modem/nr5g/RRC/failure_mgr_efs_list_cfgfailure_mgr_efs_list_cfg unverified
NR5G setting: NR5G RRC / L1
0x01042c012c0105042c012c0105042c010400780078000500
/nv/item_files/modem/lte/rrc/efs/data_inactivity_controldata_inactivity_control unverified
LTE setting: LTE RRC / L1 / L2
0x01000000140000003075000060ea0000c0d40100
/nv/item_files/modem/lte/rrc/efs/lfs_sort_per_band_priolfs_sort_per_band_prio unverified
LTE setting: LTE RRC / L1 / L2
0x01006e00
/nv/item_files/modem/lte/rrc/efs/cust_signature_scg_failure_info_nrcust_signature_scg_failure_info_nr unverified
LTE setting: LTE RRC / L1 / L2
0x0100
/nv/item_files/modem/lte/ML1/fr2_priority_optimizationfr2_priority_optimization unverified
LTE setting: LTE RRC / L1 / L2
0x01000000960000002800000000000000
/nv/item_files/gps/cgps/sm/aagps_positioning_modes_supported_extaagps_positioning_modes_supported_ext unverified
GNSS setting: GNSS / location
0x0100100000000000
/nv/item_files/modem/nr5g/RRC/cap_control_t_plus_f_band_combosNR TDD+FDD combo control likely
Enables NR-CA/NR-DC TDD+FDD band-combo classes
0x07
/nv/item_files/modem/mav/mav_cm_cs_shutdown_plmn_listCS shutdown PLMNs likely
PLMNs whose 2G/3G circuit-switched network is shut down (count byte, then 3-byte BCD PLMNs)
0x0413005113008213008313001400000000000000000000000000000000000000…
/nv/item_files/modem/nr5g/RRC/cap_srs_carrier_switch_per_plmn_control_v2cap_srs_carrier_switch_per_plmn_control_v2 likely
NR UE capability: NR RRC UE-capability toggle
0x02ffffff000064f0ff0101000000000000000000000000000000000000000000…
/nv/item_files/modem/nr5g/RRC/cap_feature_band_nrNR band capability likely
NR band feature-capability list; proprietary layout
0xff02ff02
/nv/item_files/modem/mmode/mode_prefmode_pref unverified
Multimode setting: Call manager / system determination
0x5c000000
/mav/mav_police_pri_mode_pref_maskMode preference police mask unverified
Apple mask over the PRI mode preference
0x5c000000
/nv/item_files/modem/nr5g/RRC/cre_scg_custom_signal_enablecre_scg_custom_signal_enable unverified
NR5G setting: NR5G RRC / L1
0x01
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/lte/rrc/bbq/fake_enodeb_exception_plmn_listFake eNodeB exception PLMNs likely
PLMNs exempt from fake-eNodeB mitigation (count byte, then 3-byte BCD PLMNs)
0x0c13003813001213031205f59503222703322735f03144f05537f09205f51117…
/nv/item_files/modem/mmode/ext_ims_emerg_suppext_ims_emerg_supp unverified
Multimode setting: Call manager / system determination
0x01
/nv/item_files/modem/lte/rrc/efs/conn_rel_due_to_cap_ulm_timerconn_rel_due_to_cap_ulm_timer unverified
LTE setting: LTE RRC / L1 / L2
0x204e
/nv/item_files/modem/lte/rrc/efs/advanced_rel_ver_advtz_retry_thresadvanced_rel_ver_advtz_retry_thres unverified
LTE setting: LTE RRC / L1 / L2
0x02
/nv/item_files/modem/lte/rrc/efs/reg_fail_rel_ver_adpt_paramreg_fail_rel_ver_adpt_param unverified
LTE setting: LTE RRC / L1 / L2
0x204e0200
/nv/item_files/modem/nr5g/RRC/cap_enable_pl_infocap_enable_pl_info likely
NR UE capability: NR RRC UE-capability toggle
0x00
NV 1920AAGPS Positioning Modes Supported likely0x29040000
PROT_NV · 24 items P6
ItemWhat it isValue
/mav/bbcfg_file_hash_protocol_static_nvbbcfg_file_hash_protocol_static_nv likely
Baseband defaults digest: Digest of the bbcfg.mbn blob these defaults came from, kept in EFS so the modem knows which set it holds
0x875f13f04e12ee1f103d1005a2df70f537a80c8d
/nv/item_files/gps/cgps/sm/aagps_positioning_modes_supported_extaagps_positioning_modes_supported_ext unverified
GNSS setting: GNSS / location
0x0100100000000000
/nv/item_files/gps/cgps/common/gnss_non_std_cfggnss_non_std_cfg unverified
GNSS setting: GNSS / location
0x0100000000000000
/nv/item_files/gps/cgps/sm/tm_config_agnss_transmission_delaytm_config_agnss_transmission_delay unverified
GNSS setting: GNSS / location
0x0000000000000000000000000000000000000000000000000000000000000000…
/nv/item_files/modem/nr5g/RRC/cap_control_pc1dot5cap_control_pc1dot5 likely
NR UE capability: NR RRC UE-capability toggle
0x01
/nv/item_files/modem/nr5g/RRC/cap_control_pc1dot5_per_plmncap_control_pc1dot5_per_plmn likely
NR UE capability: NR RRC UE-capability toggle
0x08ffffff000013f0ff010013f1ff010013f2ff010013f3ff010013f4ff010013…
/nv/item_files/modem/nr5g/RRC/cap_pc2_control_v2cap_pc2_control_v2 likely
NR UE capability: NR RRC UE-capability toggle
0x25ffffff000013f0ff010113f1ff010113f2ff010113f3ff010113f4ff010113…
/nv/item_files/modem/nr5g/ML1/srch_sensor_bmsrch_sensor_bm unverified
NR5G setting: NR5G RRC / L1
0x0101
/nv/item_files/mcs/lmtsmgr/vbatt/vbatt_lte_limitvbatt_lte_limit likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x0200780011001100110011000000000000000000ff0ab80b32001e001e001e00…
/nv/item_files/mcs/lmtsmgr/vbatt/vbatt_nr5g_limitvbatt_nr5g_limit likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x0200b60011001100110011000000000000000000ff0ab80b32001e001e001e00…
/nv/item_files/mcs/lmtsmgr/vbatt/vbatt_gsm_limitvbatt_gsm_limit likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x02002b0034013401000000000000000000000000ff0ab80b3200270127010000…
/nv/item_files/modem/nr5g/ML1/fc_bcl_slow_path_extfc_bcl_slow_path_ext unverified
NR5G setting: NR5G RRC / L1
0x00020000
/nv/item_files/modem/mcs/cfcm/ezefs/cfcm_monitor_timerscfcm_monitor_timers likely
CFCM flow control: Central flow control for thermal, CPU and DDR-bandwidth mitigation
0x0100000000e80300000100000064000000
/nv/item_files/modem/nr5g/RRC/cap_control_ul_mimo_per_plmncap_control_ul_mimo_per_plmn likely
NR UE capability: NR RRC UE-capability toggle
0x09ffffff0064f0ff0113f0ff0113f1ff0113f2ff0113f3ff0113f4ff0113f5ff…
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/mmode/sd/mcc_list_emerg_call_full_srvmcc_list_emerg_call_full_srv unverified
Multimode setting: Call manager / system determination
0xb8010000b9010000000000000000000000000000
/nv/item_files/mcs/trm/asdiv_antenna_disable_for_freq_rangeasdiv_antenna_disable_for_freq_range unverified
TRM setting: RF chain arbitration and antenna switch diversity
0x0102db00430960090101db004309600901029f004309600901019f0043096009
/nv/item_files/modem/mmode/qmi/qet_sleep_guard_timerqet_sleep_guard_timer unverified
Multimode setting: Call manager / system determination
0x01000000
NV 68760x0000000005
NV 68760x0000000005
NV 68760x0000000005
NV 1920AAGPS Positioning Modes Supported likely0x29040000
NV 70x3000
NV 80x69
PROT_PRI · 26 items P6
ItemWhat it isValue
/mav/product_pri_setting_revisionProduct PRI revision likely
Revision of the product PRI settings the modem last wrote to EFS
1.0.11 0x01000b00
/mav/product_pri_setting_efidiag_revisionProduct PRI EFI-diag revision likely
Revision of the EFI-diag part of the product PRI settings
1.0.7 0x01000700
/nv/item_files/modem/maverick/test/mav_test_efs_size_1mav_test_efs_size_1 likely
Apple test item: Modem EFS test item (fixed pattern)
0x05
/nv/item_files/modem/maverick/test/mav_test_efs_size_2mav_test_efs_size_2 likely
Apple test item: Modem EFS test item (fixed pattern)
0x0605
/nv/item_files/modem/maverick/test/mav_test_efs_size_4mav_test_efs_size_4 likely
Apple test item: Modem EFS test item (fixed pattern)
0x08040201
/nv/item_files/modem/nr5g/RRC/failure_mgr_efs_list_cfgfailure_mgr_efs_list_cfg unverified
NR5G setting: NR5G RRC / L1
0x01042c012c0105042c012c0105042c010400780078000500
/nv/item_files/modem/lte/rrc/efs/data_inactivity_controldata_inactivity_control unverified
LTE setting: LTE RRC / L1 / L2
0x01000000140000003075000060ea0000c0d40100
/nv/item_files/modem/lte/rrc/efs/lfs_sort_per_band_priolfs_sort_per_band_prio unverified
LTE setting: LTE RRC / L1 / L2
0x01006e00
/nv/item_files/modem/lte/rrc/efs/cust_signature_scg_failure_info_nrcust_signature_scg_failure_info_nr unverified
LTE setting: LTE RRC / L1 / L2
0x0100
/nv/item_files/modem/lte/ML1/fr2_priority_optimizationfr2_priority_optimization unverified
LTE setting: LTE RRC / L1 / L2
0x01000000960000002800000000000000
/nv/item_files/gps/cgps/sm/aagps_positioning_modes_supported_extaagps_positioning_modes_supported_ext unverified
GNSS setting: GNSS / location
0x0100100000000000
/nv/item_files/modem/nr5g/RRC/cap_control_t_plus_f_band_combosNR TDD+FDD combo control likely
Enables NR-CA/NR-DC TDD+FDD band-combo classes
0x07
/nv/item_files/modem/mav/mav_cm_cs_shutdown_plmn_listCS shutdown PLMNs likely
PLMNs whose 2G/3G circuit-switched network is shut down (count byte, then 3-byte BCD PLMNs)
0x0413005113008213008313001400000000000000000000000000000000000000…
/nv/item_files/modem/nr5g/RRC/cap_srs_carrier_switch_per_plmn_control_v2cap_srs_carrier_switch_per_plmn_control_v2 likely
NR UE capability: NR RRC UE-capability toggle
0x02ffffff000064f0ff0101000000000000000000000000000000000000000000…
/nv/item_files/modem/nr5g/RRC/cap_feature_band_nrNR band capability likely
NR band feature-capability list; proprietary layout
0xff02ff02
/nv/item_files/modem/mmode/mode_prefmode_pref unverified
Multimode setting: Call manager / system determination
0x5c000000
/mav/mav_police_pri_mode_pref_maskMode preference police mask unverified
Apple mask over the PRI mode preference
0x5c000000
/nv/item_files/modem/nr5g/RRC/cre_scg_custom_signal_enablecre_scg_custom_signal_enable unverified
NR5G setting: NR5G RRC / L1
0x01
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/lte/rrc/bbq/fake_enodeb_exception_plmn_listFake eNodeB exception PLMNs likely
PLMNs exempt from fake-eNodeB mitigation (count byte, then 3-byte BCD PLMNs)
0x0c13003813001213031205f59503222703322735f03144f05537f09205f51117…
/nv/item_files/modem/mmode/ext_ims_emerg_suppext_ims_emerg_supp unverified
Multimode setting: Call manager / system determination
0x01
/nv/item_files/modem/lte/rrc/efs/conn_rel_due_to_cap_ulm_timerconn_rel_due_to_cap_ulm_timer unverified
LTE setting: LTE RRC / L1 / L2
0x204e
/nv/item_files/modem/lte/rrc/efs/advanced_rel_ver_advtz_retry_thresadvanced_rel_ver_advtz_retry_thres unverified
LTE setting: LTE RRC / L1 / L2
0x02
/nv/item_files/modem/lte/rrc/efs/reg_fail_rel_ver_adpt_paramreg_fail_rel_ver_adpt_param unverified
LTE setting: LTE RRC / L1 / L2
0x204e0200
/nv/item_files/modem/nr5g/RRC/cap_enable_pl_infocap_enable_pl_info likely
NR UE capability: NR RRC UE-capability toggle
0x00
NV 1920AAGPS Positioning Modes Supported likely0x29040000
SHPNG · 181 items P0
ItemWhat it isValue
/mav/bbcfg_file_hash_common_shipping_settingbbcfg_file_hash_common_shipping_setting likely
Baseband defaults digest: Digest of the bbcfg.mbn blob these defaults came from, kept in EFS so the modem knows which set it holds
0xa7be8614a1e500e8b47d67d9879ab96968c4cd29
/nv/item_files/modem/mmode/mode_prefmode_pref unverified
Multimode setting: Call manager / system determination
0x5f000000
/nv/item_files/modem/mmode/mode_prefmode_pref unverified
Multimode setting: Call manager / system determination
0x5f000000
/nv/item_files/modem/mmode/mode_prefmode_pref unverified
Multimode setting: Call manager / system determination
0x5f000000
/nv/item_files/modem/mmode/ue_usage_settingUE usage setting likely
TS 24.301 UE usage setting
Voice centric 0x00
/nv/item_files/modem/mmode/ue_usage_settingUE usage setting likely
TS 24.301 UE usage setting
Data centric 0x01
/nv/item_files/modem/mmode/ue_usage_settingUE usage setting likely
TS 24.301 UE usage setting
Data centric 0x01
/nv/item_files/Thin_UI/enable_thin_ui_cfgThin UI config unverified
Enable the Thin UI (headless) configuration read by MMOC
Off 0x00
/nv/item_files/Thin_UI/enable_thin_ui_cfgThin UI config unverified
Enable the Thin UI (headless) configuration read by MMOC
On 0x01
/nv/item_files/Thin_UI/enable_thin_ui_cfgThin UI config unverified
Enable the Thin UI (headless) configuration read by MMOC
On 0x01
/nv/item_files/modem/mmode/qmi/incom_evt_resendincom_evt_resend unverified
Multimode setting: Call manager / system determination
0xd00714
/nv/item_files/mcs/tcxomgr/xo_crystal_typexo_crystal_type unverified
XO manager setting: Crystal oscillator (TCXO / XO) calibration and type
0x02000000
/nv/item_files/mcs/tcxomgr/xo_crystal_typexo_crystal_type unverified
XO manager setting: Crystal oscillator (TCXO / XO) calibration and type
0x02000000
/nv/item_files/mcs/tcxomgr/xo_crystal_typexo_crystal_type unverified
XO manager setting: Crystal oscillator (TCXO / XO) calibration and type
0x02000000
/nv/item_files/modem/lte/common/ca_disableca_disable unverified
LTE setting: LTE RRC / L1 / L2
0x00
/nv/item_files/modem/lte/common/ca_disableca_disable unverified
LTE setting: LTE RRC / L1 / L2
0x00
/nv/item_files/modem/hdr/srch/hdr_acq_div_enablehdr_acq_div_enable unverified
EV-DO setting: CDMA EV-DO (HDR) MAC / search
0x01
/nv/item_files/modem/hdr/srch/hdr_acq_div_thresh0hdr_acq_div_thresh0 unverified
EV-DO setting: CDMA EV-DO (HDR) MAC / search
0xa1ff
/nv/item_files/modem/hdr/srch/hdr_acq_div_thresh1hdr_acq_div_thresh1 unverified
EV-DO setting: CDMA EV-DO (HDR) MAC / search
0x9cff
/nv/item_files/modem/hdr/mac/hdr_dtx_cfghdr_dtx_cfg unverified
EV-DO setting: CDMA EV-DO (HDR) MAC / search
0x0000
/nv/item_files/modem/hdr/mac/hdr_dtx_cfghdr_dtx_cfg unverified
EV-DO setting: CDMA EV-DO (HDR) MAC / search
0x0700
/nv/item_files/modem/hdr/mac/hdr_dtx_cfghdr_dtx_cfg unverified
EV-DO setting: CDMA EV-DO (HDR) MAC / search
0x0700
/nv/item_files/modem/mmode/qmi/no_wait_respno_wait_resp unverified
Multimode setting: Call manager / system determination
0x01
/nv/item_files/modem/mmode/qmi/no_wait_respno_wait_resp unverified
Multimode setting: Call manager / system determination
0x01
/nv/item_files/modem/mmode/qmi/no_wait_respno_wait_resp unverified
Multimode setting: Call manager / system determination
0x01
/mmode/cmcall/cdma_voice_call_collisionCDMA voice call collision unverified
Call-manager handling of colliding CDMA voice calls
0x00010000
/mmode/cmcall/cdma_voice_call_collisionCDMA voice call collision unverified
Call-manager handling of colliding CDMA voice calls
0x00010000
/mmode/cmcall/cdma_voice_call_collisionCDMA voice call collision unverified
Call-manager handling of colliding CDMA voice calls
0x00010000
/nv/item_files/modem/mmode/continue_emd_maskcontinue_emd_mask unverified
Multimode setting: Call manager / system determination
0x09
/nv/item_files/gps/cgps/me/gnss_configgnss_config unverified
GNSS setting: GNSS / location
0x51a80000
/nv/item_files/gps/cgps/me/gnss_me_rfgd_gps2glo_nsgnss_me_rfgd_gps2glo_ns unverified
GNSS setting: GNSS / location
0x3d849745337f97455c679745487d9745c393974571759745007a9745ec919745…
/nv/item_files/gps/cgps/sm/gnss_sm_agps_featuresgnss_sm_agps_features unverified
GNSS setting: GNSS / location
0x02000000
/nv/item_files/gps/cgps/me/gnss_me_E1toE5a_rfgd_nsgnss_me_E1toE5a_rfgd_ns unverified
GNSS setting: GNSS / location
0x7c1a0000
/nv/item_files/gps/cgps/me/gnss_me_L1toL5_rfgd_nsgnss_me_L1toL5_rfgd_ns unverified
GNSS setting: GNSS / location
0x7c1a0000
/nv/item_files/gps/cgps/me/gnss_me_e911_constellation_disablementgnss_me_e911_constellation_disablement unverified
GNSS setting: GNSS / location
0x00
/nv/item_files/gps/cgps/me/gnss_me_forced_mb_engagement_configgnss_me_forced_mb_engagement_config unverified
GNSS setting: GNSS / location
0x0000
/nv/item_files/gps/cgps/me/gnss_me_rfgd_b1c2b2a_nsgnss_me_rfgd_b1c2b2a_ns unverified
GNSS setting: GNSS / location
0x7c1a0000
/nv/item_files/gps/cgps/me/gnss_me_B1itoB2a_rfgd_nsgnss_me_B1itoB2a_rfgd_ns unverified
GNSS setting: GNSS / location
0x92180000
/nv/item_files/gps/cgps/me/gnss_me_BdsB1iToB1c_rfgd_nsgnss_me_BdsB1iToB1c_rfgd_ns unverified
GNSS setting: GNSS / location
0x16feffff
/nv/item_files/gps/cgps/me/gnss_me_rfgd_gps2b1c_nsgnss_me_rfgd_gps2b1c_ns unverified
GNSS setting: GNSS / location
0x00000000
/nv/item_files/gps/cgps/me/gnss_me_rfgd_bds_nsgnss_me_rfgd_bds_ns unverified
GNSS setting: GNSS / location
0xea010000
/nv/item_files/gps/cgps/me/gnss_me_rfgd_gps2gal_nsgnss_me_rfgd_gps2gal_ns unverified
GNSS setting: GNSS / location
0x00000000
/nv/item_files/gps/cgps/me/gnss_me_rfgd_gps2navic_nsgnss_me_rfgd_gps2navic_ns unverified
GNSS setting: GNSS / location
0x51fdffff
/cgps/nv/item_files/me/gnss_me_rfgd_glo_uncertainty_nsgnss_me_rfgd_glo_uncertainty_ns unverified
GNSS setting: GNSS / location
0x204e
/nv/item_files/gps/cgps/me/gnss_me_power_optimized_acq_configgnss_me_power_optimized_acq_config unverified
GNSS setting: GNSS / location
0x00000000
/nv/item_files/gps/cgps/me/gnss_power_optimization_controlgnss_power_optimization_control unverified
GNSS setting: GNSS / location
0x0001000000
/nv/item_files/gps/cgps/me/gnss_me_catastrophic_navic_l5_configgnss_me_catastrophic_navic_l5_config unverified
GNSS setting: GNSS / location
0x00
/nv/item_files/gps/cgps/sm/assisted_bds_protocol_enable_maskassisted_bds_protocol_enable_mask unverified
GNSS setting: GNSS / location
0x00000000
/nv/item_files/gps/cgps/sm/gnss_assisted_glo_protocol_selectgnss_assisted_glo_protocol_select unverified
GNSS setting: GNSS / location
0x00000000
/nv/item_files/gps/cgps/sm/gnss_concurrent_sessions_support_configgnss_concurrent_sessions_support_config unverified
GNSS setting: GNSS / location
0x01000000
/nv/item_files/gps/cgps/sm/gnss_emergency_support_configgnss_emergency_support_config unverified
GNSS setting: GNSS / location
0x03000000
/nv/item_files/gps/cgps/sm/gnss_lock_ctrl_for_oemgnss_lock_ctrl_for_oem unverified
GNSS setting: GNSS / location
0x01000000
/nv/item_files/gps/cgps/sm/gnss_lpp_enablegnss_lpp_enable unverified
GNSS setting: GNSS / location
0x0b
/nv/item_files/gps/cgps/sm/gnss_lppe_cp_configgnss_lppe_cp_config unverified
GNSS setting: GNSS / location
0x00000000
/nv/item_files/gps/cgps/sm/gnss_lppe_up_configgnss_lppe_up_config unverified
GNSS setting: GNSS / location
0x00000000
/nv/item_files/gps/cgps/sm/gnss_sm_sha_tls_supportgnss_sm_sha_tls_support unverified
GNSS setting: GNSS / location
0x01000000
/cgps/nv/item_files/pe/gnss_rti_health_expiration_periodgnss_rti_health_expiration_period unverified
GNSS setting: GNSS / location
0xa8000000
/nv/item_files/gps/cgps/sm/gnss_supl_udp_enable_selectgnss_supl_udp_enable_select unverified
GNSS setting: GNSS / location
0x02
/nv/item_files/gps/cgps/me/gnss_multiband_configurationgnss_multiband_configuration unverified
GNSS setting: GNSS / location
0x27020000
/nv/item_files/modem/mcs/cfcm/ezefs/cfcm_dsccfcm_dsc likely
CFCM flow control: Central flow control for thermal, CPU and DDR-bandwidth mitigation
0x01
/mav/cpms_feature_togglecpms_feature_toggle likely
CPMS power control: Modem peak-power / thermal controller
0x01
/mav/cpms_dbg_msg_togglecpms_dbg_msg_toggle likely
CPMS power control: Modem peak-power / thermal controller
0x00
/mav/cpms_sidefire_mitigationscpms_sidefire_mitigations likely
CPMS power control: Modem peak-power / thermal controller
0x00
/nv/item_files/mcs/lmtsmgr/vbatt/vbatt_lte_limitvbatt_lte_limit likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x02007800e900cf00df00cb00ff0ab80b3200dc00c200d200be006e0a270b3200…
/nv/item_files/mcs/lmtsmgr/vbatt/vbatt_nr5g_limitvbatt_nr5g_limit likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x0200b600e900cf00df00cb00ff0ab80b3200dc00c200d200be006e0a270b3200…
/nv/item_files/mcs/lmtsmgr/vbatt/vbatt_gsm_limitvbatt_gsm_limit likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x02002b002a011b013b013b01ff0ab80b32001d010e013b013b016e0a270b3200…
/nv/item_files/mcs/lmtsmgr/vbatt/vbatt_modevbatt_mode likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x00020000
/nv/item_files/modem/mcs/cfcm/ezefs/cfcm_monitor_timerscfcm_monitor_timers likely
CFCM flow control: Central flow control for thermal, CPU and DDR-bandwidth mitigation
0x0100000000e80300000100000064000000
/nv/item_files/mcs/lmtsmgr/wwpwr_est/wwpwr_est_lte_pawwpwr_est_lte_pa likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x0200000013001300130013001500150007000700160016001600160017001700…
/nv/item_files/mcs/lmtsmgr/wwpwr_est/wwpwr_est_nr_pawwpwr_est_nr_pa likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x0200000013001300130013001500150007000700160016001600160017001700…
/nv/item_files/mcs/lmtsmgr/wwpwr_est/wwpwr_est_wcdma_pawwpwr_est_wcdma_pa likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x0200000017001700170017001700170017001700210021002100210021002100…
/nv/item_files/mcs/lmtsmgr/wwpwr_est/wwpwr_est_lte_elnawwpwr_est_lte_elna likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x020000000a000a000a000a00
/nv/item_files/mcs/lmtsmgr/wwpwr_est/wwpwr_est_nr_elnawwpwr_est_nr_elna likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x020000000a000a000a000a00
/nv/item_files/mcs/lmtsmgr/wwpwr_est/wwpwr_est_wcdma_elnawwpwr_est_wcdma_elna likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x020000000a000a000a000a00
/nv/item_files/mcs/lmtsmgr/wwpwr_est/wwpwr_est_togglewwpwr_est_toggle likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x01000000
/nv/item_files/modem/nr5g/L2/mac/ul_tx_backofful_tx_backoff unverified
NR5G setting: NR5G RRC / L1
0x01001e0003000a0082000000983a0000
/nv/item_files/modem/lte/L2/mac/lte_mac_ul_throttle_min_ratelte_mac_ul_throttle_min_rate unverified
LTE setting: LTE RRC / L1 / L2
0xb80b
/nv/item_files/modem/maverick/uim/apps/sub_slot_mapping_overrideSubscription-slot mapping override likely
Overrides which SIM slot backs each subscription
0x000000
/nv/item_files/modem/lte/ML1/rsrp_boost_cfgrsrp_boost_cfg unverified
LTE setting: LTE RRC / L1 / L2
0x030301
/nv/item_files/modem/lte/rrc/efs/data_inactivity_controldata_inactivity_control unverified
LTE setting: LTE RRC / L1 / L2
0x00000000140000003075000060ea0000c0d40100
/nv/item_files/modem/mmode/sd/sub_scan_scopesub_scan_scope unverified
Multimode setting: Call manager / system determination
0x0a00
/nv/item_files/mcfg/mcfg_refresh_timermcfg_refresh_timer unverified
MCFG setting: Modem configuration (MBN) selection and refresh
0x0a
/nv/item_files/mcfg/mcfg_refresh_timer_Subscription02mcfg_refresh_timer_Subscription02 unverified
MCFG setting: Modem configuration (MBN) selection and refresh
0x0a
/nv/item_files/modem/mav/mav_gsm_disable_mcc_listGSM-disabled MCCs likely
MCCs where GSM is not used (count byte, then uint16 MCCs; bbcfg ships 440, 441, 466, 525)
0x04b801b901d2010d020000000000000000000000000000000000000000000000…
NV 62005PRI revision
Packed PRI Revision header
0.0.0 0x00000000
NV 62033GRI revision
Packed GRI Revision header
0.0.0 0x00000000
NV 5280Disable CM Call Type likely0x0200000000000000
NV 8800x01
NV 8810x01
NV 8820x00
NV 10300x02
NV 10310x02
NV 36280x00
NV 42090x00
NV 520000x0100
NV 58021NV 58021 unverified0xf7
NV 25090x0a
NV 9110x0a
NV 38520x3e
NV 3649WCDMA RRC Version likely0x05
NV 41730x01
NV 50900x01
NV 25100x01
NV 41570x00
NV 41580x00
NV 8180xc1
NV 34580x00000000000000000000000000
NV 35150xabffa1ff
NV 36320x0000224800000000
NV 4102CDMA SO68 Enabled likely0x01
NV 42040x00
NV 850Service domain preference likelyCS + PS 0x0200
NV 646490x00000000
NV 740x0000
NV 740x0101
NV 740x0101
NV 4530x00
NV 4530x01
NV 4530x01
NV 500060x06
NV 500060x05
NV 500060x05
NV 645640x030000006400640000000000640032140800000000000000
NV 645640x000000006400640000000000640032140800000000000000
NV 645640x000000006400640000000000640032140800000000000000
NV 646480x0000000000000000000000000000000000000000
NV 646480x0000000000000000000000000000000000000000
NV 646480x0000000000000000000000000000000000000000
NV 646600x0101ffff
NV 646600xffffffff
NV 646600xffffffff
NV 500350x01000000
NV 500350x01000000
NV 500350x01000000
NV 646340x00
NV 646340x01
NV 646340x01
NV 500340x00
NV 500340x01
NV 500340x01
NV 646190x01
NV 646190x00
NV 646190x00
NV 646700x3f
NV 646700x00
NV 646700x00
NV 646710x0a
NV 646710x0b
NV 646710x0b
NV 646740x00
NV 646740x00
NV 646740x00
NV 38510x10
NV 38510x05
NV 38510x05
NV 47220x09
NV 47220x03
NV 47220x03
NV 6Mobile CAI Revision Number likely0x06
NV 6Mobile CAI Revision Number likely0x06
NV 562Preferred Hybrid Mode likely0x01
NV 562Preferred Hybrid Mode likely0x01
NV 562Preferred Hybrid Mode likely0x01
NV 10180x916c
NV 10180x0100
NV 10180x0100
NV 42310x00000000000000000100000000000000
NV 42310x00000000000000008100000000000000
NV 42310x00000000000000008100000000000000
NV 500400x00
NV 500400x00
NV 500400x00
NV 4520x03000000
NV 16240x640a
NV 17130x6e0a
NV 19290x00
NV 19400x00
NV 19600x00
NV 55960x00
NV 6264CGPS Minimum GPS Week Number likely0x47090000
NV 1920AAGPS Positioning Modes Supported likely0x29040000
Package details and members (27)
Chip ID0x001F30E1
SBL0xCC002EE6
Restore SBL0xCC102EE6
apps.mbn2.29 MiB
acdb.mbn128.0 KiB
aop_devcfg.mbn16.3 KiB
aop.mbn204.4 KiB
apdp.mbn8.2 KiB
bbcfg.mbn58.27 MiB
cpucp.elf88.5 KiB
devcfg.mbn48.3 KiB
hyp.mbn380.2 KiB
Info.plist1.1 KiB
multi_image_qti.mbn11.8 KiB
multi_image.mbn11.8 KiB
qdsp6sw_dtbs.elf44.2 KiB
qdsp6sw.mbn120.61 MiB
qupv3fw.elf44.7 KiB
restorexbl_sc.elf1.02 MiB
sec.elf8.2 KiB
sequencer_ram.elf112.7 KiB
shrm.elf32.3 KiB
signed_firmware_soc_view.elf223.2 KiB
tz.mbn1.88 MiB
uefi.elf2.54 MiB
xbl_cfg.elf128.5 KiB
xbl_sc.elf1.02 MiB
xbl_support.elf744.3 KiB
pt.mbn986.9 KiB
Options.plist0 B
Diff: Mav25 in another image
789 carriers, 225 countries · iOS 27.0.1 (24A446) · beta iOS 27.2 beta 2 (24B5089g) GitHub Ready