carrier-explode iOS carrier and country bundles
iOS version
CarriersPolicy filesNetwork databasesConfigsDiff

Mav21-5.20.02.Release.bbfw

Load order: the modem's built-in config, then bbcfg.mbn's per-platform defaults, then the bundle's .der.pri.

Carriers with band combos (0)

From band_combos_per_plmn.xml, with the bundles the OTA manifest routes each PLMN to.

No band_combos_per_plmn.xml in this package.

Policy files (27)

Plaintext EFS files the package writes. A repeated path has one copy per platform or config.

PathFromServes
/policyman/carrier_policy.xml ROWbbcfg.mbnP1P4P5P6P7P11P12P13
/data/3gpp/data_3gpp_dynamic_config.xml bbcfg.mbnP1P4P5P6P7P11P12P13
/policyman/5g_msim_feature_enabled.xml feature control for 5G MSIMbbcfg.mbnP1P4P5P6P7P11P12P13
/policyman/5g_msim_restriction.xml 5G-MSIM Roaming restrictionbbcfg.mbnP1P4P5P6P7P11P12P13
/policyman/5g_roaming_feature_enabled.xml 5G Roaming feature enablementbbcfg.mbnP1P4P5P6P7P11P12P13
/policyman/5g_roaming_restriction.xml 5G roaming restrictionbbcfg.mbnP1P4P5P6P7P11P12P13
/policyman/5g_sa_roaming_feature_enabled.xml 5G SA Roaming feature enablementbbcfg.mbnP1P4P5P6P7P11P12P13
/policyman/l2nr_policy.xml LTE 2 NR PSHO Controlbbcfg.mbnP1P4P5P6P7P11P12P13
/nv/rfnv/64628.xml bbcfg.mbnP4 ×37
/nv/rfnv/64628.xml bbcfg.mbnP5 ×37
/nv/rfnv/64628.xml bbcfg.mbnP6 ×37
/nv/rfnv/64628.xml bbcfg.mbnP7 ×37
/nv/rfnv/64628.xml bbcfg.mbnP11 ×12
/nv/rfnv/64628.xml bbcfg.mbnP12 ×10P13 ×10
/policyman/generic_band_restrictions.xml Generic Band Restrictionsqdsp6sw.mbn SR_DSDS-Chitwan
/policyman/global_1x_restrictions.xml Global 1x Restrictionsqdsp6sw.mbn SR_DSDS-Chitwan
/policyman/post_defines.xml Common Definitions for Post XMLsqdsp6sw.mbn SR_DSDS-ChitwanSR_MSSS-Chitwan
/policyman/hardware_band_filtering.xml qdsp6sw.mbn SR_DSDS-ChitwanSR_MSSS-Chitwan
/policyman/global_defines.xml Common Global Definitions for Post XMLsqdsp6sw.mbn SR_DSDS-ChitwanSR_MSSS-Chitwan
/policyman/pre.xml PRE XMLqdsp6sw.mbn SR_DSDS-Chitwan
/policyman/disable_sa_ndds.xml Disable NR SA on nDDSqdsp6sw.mbn SR_DSDS-Chitwan
/policyman/device_config.xml Dual SIM Device Configqdsp6sw.mbn SR_DSDS-Chitwan
/policyman/policies.xml XML Orderingqdsp6sw.mbn SR_DSDS-Chitwan
/policyman/generic_band_restrictions.xml Generic Band Restrictionsqdsp6sw.mbn SR_MSSS-Chitwan
/policyman/pre.xml PRE XMLqdsp6sw.mbn SR_MSSS-Chitwan
/policyman/device_config.xml Single SIM Device Configqdsp6sw.mbn SR_MSSS-Chitwan
/policyman/policies.xml XML Orderingqdsp6sw.mbn SR_MSSS-Chitwan
/policyman/device_config.xml xml, qdsp6sw.mbn, 580 B
condition action definition · underlined names explain themselves
=Single SIM Device Config=$Change: 30768656 $=2025.1.6.1
=1=1
=G W L 5G
Network databases

Modem settings

SettingValueServes
Full-RAT fallback timer likely
/policyman/fullrat_timer
300 s before trying every technology; second value 155000 (unknown) 0x2c010000785d0200 SR_DSDS-ChitwanSR_MSSS-Chitwan
Device mode likely
/nv/item_files/modem/mmode/device_mode
dual SIM, dual standby (DSDS) 0x01 SR_DSDS-Chitwan
Device mode likely
/nv/item_files/modem/mmode/device_mode
single SIM 0x00 SR_MSSS-Chitwan
Modem configs and containers

Built into the modem image (qdsp6sw.mbn)

LabelTypeVersionCapabilityFiles
CUST_SW_DEFAULTSW0ae00001
0
CUST_HW_DEFAULTHW0ae10100
0
(unlabelled)SWee000103
2
/multi_mbn/HW-DSDS.mbn
/multi_mbn/HW-MSSS.mbn
SR_DSDS-ChitwanHW0a00890041000020
12
/policyman/generic_band_restrictions.xml
/policyman/global_1x_restrictions.xml
/policyman/post_defines.xml
/policyman/hardware_band_filtering.xml
/policyman/global_defines.xml
/policyman/pre.xml
/policyman/disable_sa_ndds.xml
/policyman/device_config.xml
/policyman/fullrat_timer
mdb/policyman/mcc2arfcn.mdb
/policyman/policies.xml
/nv/item_files/modem/mmode/device_mode
SR_MSSS-ChitwanHW0a00890001000000
10
/policyman/generic_band_restrictions.xml
/policyman/post_defines.xml
/policyman/hardware_band_filtering.xml
/policyman/global_defines.xml
/policyman/pre.xml
/policyman/device_config.xml
/policyman/fullrat_timer
mdb/policyman/mcc2arfcn.mdb
/policyman/policies.xml
/nv/item_files/modem/mmode/device_mode
What bbcfg.mbn holds (11 blob types)
TypeNameBlobsRecordsHolds
1DFLT_CAL?unverified14214RF defaults/calibration NV list, VTNV/zlib values
4STAT_NV?unverified150214RF static NV list
7STAT_CFG?likely37129MAVZ MCFG HW image, /rfc/<id>_0_{res,cmn}.dat (sub-6 RF card)
8RFFE_DEV52160EFS /rfc/device_settings/*
9RFFE_LUT160160EFS /rfc/device_lut/*
10RFC_MMW530MAVZ MCFG HW image, /rfc/29xx (mmWave RF card)
11type 1118192
13PROT_SKU?unverified4170MAVZ 64 KiB binary table
15PROT_NV88protocol static NV/EFS
17PROT_PRI38product PRI defaults: /policyman/*.xml, /data/3gpp/*.xml
20SHPNG11common shipping settings
NV/EFS defaults (12 sets)
PROT_NV · 10 items P1
ItemWhat it isValue
/mav/bbcfg_file_hash_protocol_static_nvbbcfg_file_hash_protocol_static_nv likely
Baseband defaults digest: Digest of the bbcfg.mbn blob these defaults came from, kept in EFS so the modem knows which set it holds
0xf96fee7cca2cd6b99dccfd6296e192c0bb6540d1
/nv/item_files/gps/cgps/sm/aagps_positioning_modes_supported_extaagps_positioning_modes_supported_ext unverified
GNSS setting: GNSS / location
0x0000000000000000
/nv/item_files/modem/nr5g/RRC/cap_pc2_control_v2cap_pc2_control_v2 likely
NR UE capability: NR RRC UE-capability toggle
0x0fffffff000013f0ff010113f1ff010113f2ff010113f3ff010113f4ff010113…
/nv/item_files/modem/nr5g/ML1/srch_sensor_bmsrch_sensor_bm unverified
NR5G setting: NR5G RRC / L1
0x0101
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/mmode/sd/mcc_list_emerg_call_full_srvmcc_list_emerg_call_full_srv unverified
Multimode setting: Call manager / system determination
0xb8010000b9010000000000000000000000000000
NV 68760x0000000005
NV 68760x0000000005
NV 68760x0000000005
NV 1920AAGPS Positioning Modes Supported likely0x29040000
PROT_PRI · 21 items P1
ItemWhat it isValue
/mav/product_pri_setting_revisionProduct PRI revision likely
Revision of the product PRI settings the modem last wrote to EFS
1.2.27 0x01021b00
/mav/product_pri_setting_efidiag_revisionProduct PRI EFI-diag revision likely
Revision of the EFI-diag part of the product PRI settings
1.2.23 0x01021700
/nv/item_files/modem/maverick/test/mav_test_efs_size_1mav_test_efs_size_1 likely
Apple test item: Modem EFS test item (fixed pattern)
0x05
/nv/item_files/modem/maverick/test/mav_test_efs_size_2mav_test_efs_size_2 likely
Apple test item: Modem EFS test item (fixed pattern)
0x0605
/nv/item_files/modem/maverick/test/mav_test_efs_size_4mav_test_efs_size_4 likely
Apple test item: Modem EFS test item (fixed pattern)
0x08040201
/nv/item_files/modem/nr5g/RRC/failure_mgr_efs_list_cfgfailure_mgr_efs_list_cfg unverified
NR5G setting: NR5G RRC / L1
0x01042c012c0105042c012c0105042c010400780078000500
/nv/item_files/modem/lte/rrc/efs/data_inactivity_controldata_inactivity_control unverified
LTE setting: LTE RRC / L1 / L2
0x01000000140000003075000060ea0000c0d40100
/nv/item_files/modem/lte/rrc/efs/lfs_sort_per_band_priolfs_sort_per_band_prio unverified
LTE setting: LTE RRC / L1 / L2
0x01006e00
/nv/item_files/modem/lte/rrc/efs/cust_signature_scg_failure_info_nrcust_signature_scg_failure_info_nr unverified
LTE setting: LTE RRC / L1 / L2
0x0100
/nv/item_files/modem/lte/ML1/fr2_priority_optimizationfr2_priority_optimization unverified
LTE setting: LTE RRC / L1 / L2
0x01000000960000002800000000000000
/nv/item_files/gps/cgps/sm/aagps_positioning_modes_supported_extaagps_positioning_modes_supported_ext unverified
GNSS setting: GNSS / location
0x0000000000000000
/nv/item_files/modem/nr5g/RRC/cap_control_t_plus_f_band_combosNR TDD+FDD combo control likely
Enables NR-CA/NR-DC TDD+FDD band-combo classes
0x00
/nv/item_files/modem/mav/mav_cm_cs_shutdown_plmn_listCS shutdown PLMNs likely
PLMNs whose 2G/3G circuit-switched network is shut down (count byte, then 3-byte BCD PLMNs)
0x0413005113008213008313001400000000000000000000000000000000000000…
/nv/item_files/modem/nr5g/RRC/cap_srs_carrier_switch_per_plmn_control_v2cap_srs_carrier_switch_per_plmn_control_v2 likely
NR UE capability: NR RRC UE-capability toggle
0x01ffffff00000000000000000000000000000000000000000000000000000000…
/nv/item_files/ims/media_service_configIMS media service config unverified
IMS media (codec/RTP) service config; no public schema
0x062e000000000101000014000000000000000000000000000000000000000000…
/nv/item_files/modem/nr5g/RRC/cap_feature_band_nrNR band capability likely
NR band feature-capability list; proprietary layout
0x00020000
/nv/item_files/modem/mmode/mode_prefmode_pref unverified
Multimode setting: Call manager / system determination
0x5c000000
/mav/mav_police_pri_mode_pref_maskMode preference police mask unverified
Apple mask over the PRI mode preference
0x5c000000
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/lte/rrc/bbq/fake_enodeb_exception_plmn_listFake eNodeB exception PLMNs likely
PLMNs exempt from fake-eNodeB mitigation (count byte, then 3-byte BCD PLMNs)
0x0c13003813001213031205f59503222703322735f03144f05537f09205f51117…
NV 1920AAGPS Positioning Modes Supported likely0x29040000
PROT_NV · 22 items P4
ItemWhat it isValue
/mav/bbcfg_file_hash_protocol_static_nvbbcfg_file_hash_protocol_static_nv likely
Baseband defaults digest: Digest of the bbcfg.mbn blob these defaults came from, kept in EFS so the modem knows which set it holds
0x4a627fe64da0e2adc21747918489911ec06c87c2
/nv/item_files/gps/cgps/me/gnss_bds_path_lossgnss_bds_path_loss unverified
GNSS setting: GNSS / location
0x26
/nv/item_files/gps/cgps/me/gnss_gal_path_lossgnss_gal_path_loss unverified
GNSS setting: GNSS / location
0x28
/nv/item_files/gps/cgps/sm/aagps_positioning_modes_supported_extaagps_positioning_modes_supported_ext unverified
GNSS setting: GNSS / location
0x0100000000000000
/cgps/nv/item_files/me/gnss_pga_backoff_configgnss_pga_backoff_config unverified
GNSS setting: GNSS / location
0x04000000
/nv/item_files/mcs/lmtsmgr/gnss/gnss_nr_configgnss_nr_config likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x0000000000000000000000000000000000000000000000000000000000000000…
/nv/item_files/gps/cgps/me/gnss_multiband_configurationgnss_multiband_configuration unverified
GNSS setting: GNSS / location
0x27000000
/nv/item_files/modem/nr5g/RRC/cap_pc2_control_v2cap_pc2_control_v2 likely
NR UE capability: NR RRC UE-capability toggle
0x0fffffff000013f0ff010113f1ff010113f2ff010113f3ff010113f4ff010113…
/nv/item_files/modem/nr5g/ML1/srch_sensor_bmsrch_sensor_bm unverified
NR5G setting: NR5G RRC / L1
0x0101
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/mmode/sd/mcc_list_emerg_call_full_srvmcc_list_emerg_call_full_srv unverified
Multimode setting: Call manager / system determination
0xb8010000b9010000000000000000000000000000
NV 68760x0000000005
NV 68760x0000000005
NV 68760x0000000005
NV 1920AAGPS Positioning Modes Supported likely0x29040000
NV 70x3000
NV 80x69
NV 49550xf03c09fdf0000564000d020000000000
NV 4490x21
NV 67630x2e
NV 67640x30
NV 67650x2c
PROT_PRI · 21 items P4P5P6P7
ItemWhat it isValue
/mav/product_pri_setting_revisionProduct PRI revision likely
Revision of the product PRI settings the modem last wrote to EFS
1.2.27 0x01021b00
/mav/product_pri_setting_efidiag_revisionProduct PRI EFI-diag revision likely
Revision of the EFI-diag part of the product PRI settings
1.2.23 0x01021700
/nv/item_files/modem/maverick/test/mav_test_efs_size_1mav_test_efs_size_1 likely
Apple test item: Modem EFS test item (fixed pattern)
0x05
/nv/item_files/modem/maverick/test/mav_test_efs_size_2mav_test_efs_size_2 likely
Apple test item: Modem EFS test item (fixed pattern)
0x0605
/nv/item_files/modem/maverick/test/mav_test_efs_size_4mav_test_efs_size_4 likely
Apple test item: Modem EFS test item (fixed pattern)
0x08040201
/nv/item_files/modem/nr5g/RRC/failure_mgr_efs_list_cfgfailure_mgr_efs_list_cfg unverified
NR5G setting: NR5G RRC / L1
0x01042c012c0105042c012c0105042c010400780078000500
/nv/item_files/modem/lte/rrc/efs/data_inactivity_controldata_inactivity_control unverified
LTE setting: LTE RRC / L1 / L2
0x01000000140000003075000060ea0000c0d40100
/nv/item_files/modem/lte/rrc/efs/lfs_sort_per_band_priolfs_sort_per_band_prio unverified
LTE setting: LTE RRC / L1 / L2
0x01006e00
/nv/item_files/modem/lte/rrc/efs/cust_signature_scg_failure_info_nrcust_signature_scg_failure_info_nr unverified
LTE setting: LTE RRC / L1 / L2
0x0100
/nv/item_files/modem/lte/ML1/fr2_priority_optimizationfr2_priority_optimization unverified
LTE setting: LTE RRC / L1 / L2
0x01000000960000002800000000000000
/nv/item_files/gps/cgps/sm/aagps_positioning_modes_supported_extaagps_positioning_modes_supported_ext unverified
GNSS setting: GNSS / location
0x0100000000000000
/nv/item_files/modem/nr5g/RRC/cap_control_t_plus_f_band_combosNR TDD+FDD combo control likely
Enables NR-CA/NR-DC TDD+FDD band-combo classes
0x00
/nv/item_files/modem/mav/mav_cm_cs_shutdown_plmn_listCS shutdown PLMNs likely
PLMNs whose 2G/3G circuit-switched network is shut down (count byte, then 3-byte BCD PLMNs)
0x0413005113008213008313001400000000000000000000000000000000000000…
/nv/item_files/modem/nr5g/RRC/cap_srs_carrier_switch_per_plmn_control_v2cap_srs_carrier_switch_per_plmn_control_v2 likely
NR UE capability: NR RRC UE-capability toggle
0x01ffffff00000000000000000000000000000000000000000000000000000000…
/nv/item_files/ims/media_service_configIMS media service config unverified
IMS media (codec/RTP) service config; no public schema
0x062e000000000101000014000000000000000000000000000000000000000000…
/nv/item_files/modem/nr5g/RRC/cap_feature_band_nrNR band capability likely
NR band feature-capability list; proprietary layout
0x00020000
/nv/item_files/modem/mmode/mode_prefmode_pref unverified
Multimode setting: Call manager / system determination
0x5c000000
/mav/mav_police_pri_mode_pref_maskMode preference police mask unverified
Apple mask over the PRI mode preference
0x5c000000
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/lte/rrc/bbq/fake_enodeb_exception_plmn_listFake eNodeB exception PLMNs likely
PLMNs exempt from fake-eNodeB mitigation (count byte, then 3-byte BCD PLMNs)
0x0c13003813001213031205f59503222703322735f03144f05537f09205f51117…
NV 1920AAGPS Positioning Modes Supported likely0x29040000
PROT_NV · 21 items P5
ItemWhat it isValue
/mav/bbcfg_file_hash_protocol_static_nvbbcfg_file_hash_protocol_static_nv likely
Baseband defaults digest: Digest of the bbcfg.mbn blob these defaults came from, kept in EFS so the modem knows which set it holds
0xc55d010a41404152421969f0c28002b0fe612ed7
/nv/item_files/gps/cgps/me/gnss_bds_path_lossgnss_bds_path_loss unverified
GNSS setting: GNSS / location
0x26
/nv/item_files/gps/cgps/me/gnss_gal_path_lossgnss_gal_path_loss unverified
GNSS setting: GNSS / location
0x28
/nv/item_files/gps/cgps/sm/aagps_positioning_modes_supported_extaagps_positioning_modes_supported_ext unverified
GNSS setting: GNSS / location
0x0100000000000000
/cgps/nv/item_files/me/gnss_pga_backoff_configgnss_pga_backoff_config unverified
GNSS setting: GNSS / location
0x04000000
/nv/item_files/mcs/lmtsmgr/gnss/gnss_nr_configgnss_nr_config likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x0000000000000000000000000000000000000000000000000000000000000000…
/nv/item_files/gps/cgps/me/gnss_multiband_configurationgnss_multiband_configuration unverified
GNSS setting: GNSS / location
0x27000000
/nv/item_files/modem/nr5g/RRC/cap_pc2_control_v2cap_pc2_control_v2 likely
NR UE capability: NR RRC UE-capability toggle
0x0fffffff000013f0ff010113f1ff010113f2ff010113f3ff010113f4ff010113…
/nv/item_files/modem/nr5g/ML1/srch_sensor_bmsrch_sensor_bm unverified
NR5G setting: NR5G RRC / L1
0x0101
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/mmode/sd/mcc_list_emerg_call_full_srvmcc_list_emerg_call_full_srv unverified
Multimode setting: Call manager / system determination
0xb8010000b9010000000000000000000000000000
NV 68760x0000000005
NV 68760x0000000005
NV 68760x0000000005
NV 1920AAGPS Positioning Modes Supported likely0x29040000
NV 70x2c00
NV 80x6a
NV 4490x21
NV 67630x2e
NV 67640x30
NV 67650x2c
PROT_NV · 22 items P6
ItemWhat it isValue
/mav/bbcfg_file_hash_protocol_static_nvbbcfg_file_hash_protocol_static_nv likely
Baseband defaults digest: Digest of the bbcfg.mbn blob these defaults came from, kept in EFS so the modem knows which set it holds
0xf57ab714bf33a27db62f77669773bf0bff4e7e01
/nv/item_files/gps/cgps/me/gnss_bds_path_lossgnss_bds_path_loss unverified
GNSS setting: GNSS / location
0x26
/nv/item_files/gps/cgps/me/gnss_gal_path_lossgnss_gal_path_loss unverified
GNSS setting: GNSS / location
0x28
/nv/item_files/gps/cgps/sm/aagps_positioning_modes_supported_extaagps_positioning_modes_supported_ext unverified
GNSS setting: GNSS / location
0x0100000000000000
/cgps/nv/item_files/me/gnss_pga_backoff_configgnss_pga_backoff_config unverified
GNSS setting: GNSS / location
0x01000000
/nv/item_files/mcs/lmtsmgr/gnss/gnss_nr_configgnss_nr_config likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x0000000000000000000000000000000000000000000000000000000000000000…
/nv/item_files/gps/cgps/me/gnss_multiband_configurationgnss_multiband_configuration unverified
GNSS setting: GNSS / location
0x27000000
/nv/item_files/modem/nr5g/RRC/cap_pc2_control_v2cap_pc2_control_v2 likely
NR UE capability: NR RRC UE-capability toggle
0x0fffffff000013f0ff010113f1ff010113f2ff010113f3ff010113f4ff010113…
/nv/item_files/modem/nr5g/ML1/srch_sensor_bmsrch_sensor_bm unverified
NR5G setting: NR5G RRC / L1
0x0101
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/mmode/sd/mcc_list_emerg_call_full_srvmcc_list_emerg_call_full_srv unverified
Multimode setting: Call manager / system determination
0xb8010000b9010000000000000000000000000000
NV 68760x0000000005
NV 68760x0000000005
NV 68760x0000000005
NV 1920AAGPS Positioning Modes Supported likely0x29040000
NV 70x2300
NV 80x6d
NV 49550xb0790af8f00005640012020000000000
NV 4490x21
NV 67630x2e
NV 67640x30
NV 67650x2c
PROT_NV · 21 items P7
ItemWhat it isValue
/mav/bbcfg_file_hash_protocol_static_nvbbcfg_file_hash_protocol_static_nv likely
Baseband defaults digest: Digest of the bbcfg.mbn blob these defaults came from, kept in EFS so the modem knows which set it holds
0xc998a0293c2ccd0acdfb65c45ff644e4ae778f2a
/nv/item_files/gps/cgps/me/gnss_bds_path_lossgnss_bds_path_loss unverified
GNSS setting: GNSS / location
0x26
/nv/item_files/gps/cgps/me/gnss_gal_path_lossgnss_gal_path_loss unverified
GNSS setting: GNSS / location
0x28
/nv/item_files/gps/cgps/sm/aagps_positioning_modes_supported_extaagps_positioning_modes_supported_ext unverified
GNSS setting: GNSS / location
0x0100000000000000
/cgps/nv/item_files/me/gnss_pga_backoff_configgnss_pga_backoff_config unverified
GNSS setting: GNSS / location
0x01000000
/nv/item_files/gps/cgps/me/gnss_multiband_configurationgnss_multiband_configuration unverified
GNSS setting: GNSS / location
0x27000000
/nv/item_files/modem/nr5g/RRC/cap_pc2_control_v2cap_pc2_control_v2 likely
NR UE capability: NR RRC UE-capability toggle
0x0fffffff000013f0ff010113f1ff010113f2ff010113f3ff010113f4ff010113…
/nv/item_files/modem/nr5g/ML1/srch_sensor_bmsrch_sensor_bm unverified
NR5G setting: NR5G RRC / L1
0x0101
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/mmode/sd/mcc_list_emerg_call_full_srvmcc_list_emerg_call_full_srv unverified
Multimode setting: Call manager / system determination
0xb8010000b9010000000000000000000000000000
NV 68760x0000000005
NV 68760x0000000005
NV 68760x0000000005
NV 1920AAGPS Positioning Modes Supported likely0x29040000
NV 70x2d00
NV 80x6d
NV 49550xf03c09fdf0000564000d020000000000
NV 4490x21
NV 67630x2e
NV 67640x30
NV 67650x2c
PROT_NV · 22 items P11
ItemWhat it isValue
/mav/bbcfg_file_hash_protocol_static_nvbbcfg_file_hash_protocol_static_nv likely
Baseband defaults digest: Digest of the bbcfg.mbn blob these defaults came from, kept in EFS so the modem knows which set it holds
0xc9d4f83765b8f77ea30b954b70eca83d4a69c61b
/nv/item_files/gps/cgps/me/gnss_bds_path_lossgnss_bds_path_loss unverified
GNSS setting: GNSS / location
0x26
/nv/item_files/gps/cgps/me/gnss_gal_path_lossgnss_gal_path_loss unverified
GNSS setting: GNSS / location
0x28
/nv/item_files/gps/cgps/sm/aagps_positioning_modes_supported_extaagps_positioning_modes_supported_ext unverified
GNSS setting: GNSS / location
0x0000000000000000
/cgps/nv/item_files/me/gnss_pga_backoff_configgnss_pga_backoff_config unverified
GNSS setting: GNSS / location
0x01000000
/nv/item_files/mcs/lmtsmgr/gnss/gnss_nr_configgnss_nr_config likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x0000000000000000000000000000000000000000000000000000000000000000…
/nv/item_files/gps/cgps/me/gnss_multiband_configurationgnss_multiband_configuration unverified
GNSS setting: GNSS / location
0x27000000
/nv/item_files/modem/nr5g/RRC/cap_pc2_control_v2cap_pc2_control_v2 likely
NR UE capability: NR RRC UE-capability toggle
0x0fffffff000013f0ff010113f1ff010113f2ff010113f3ff010113f4ff010113…
/nv/item_files/modem/nr5g/ML1/srch_sensor_bmsrch_sensor_bm unverified
NR5G setting: NR5G RRC / L1
0x0101
/nv/item_files/modem/nas/mm5g_set_for_bit_init_regmm5g_set_for_bit_init_reg unverified
NAS setting: NAS mobility management / PLMN selection
0x01
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/mmode/sd/mcc_list_emerg_call_full_srvmcc_list_emerg_call_full_srv unverified
Multimode setting: Call manager / system determination
0xb8010000b9010000000000000000000000000000
NV 68760x0000010001
NV 68760x0000010001
NV 68760x0000010001
NV 1920AAGPS Positioning Modes Supported likely0x01000000
NV 70x3000
NV 80x6b
NV 4490x21
NV 67630x2e
NV 67640x30
NV 67650x2c
PROT_PRI · 21 items P11P12P13
ItemWhat it isValue
/mav/product_pri_setting_revisionProduct PRI revision likely
Revision of the product PRI settings the modem last wrote to EFS
1.2.27 0x01021b00
/mav/product_pri_setting_efidiag_revisionProduct PRI EFI-diag revision likely
Revision of the EFI-diag part of the product PRI settings
1.2.23 0x01021700
/nv/item_files/modem/maverick/test/mav_test_efs_size_1mav_test_efs_size_1 likely
Apple test item: Modem EFS test item (fixed pattern)
0x05
/nv/item_files/modem/maverick/test/mav_test_efs_size_2mav_test_efs_size_2 likely
Apple test item: Modem EFS test item (fixed pattern)
0x0605
/nv/item_files/modem/maverick/test/mav_test_efs_size_4mav_test_efs_size_4 likely
Apple test item: Modem EFS test item (fixed pattern)
0x08040201
/nv/item_files/modem/nr5g/RRC/failure_mgr_efs_list_cfgfailure_mgr_efs_list_cfg unverified
NR5G setting: NR5G RRC / L1
0x01042c012c0105042c012c0105042c010400780078000500
/nv/item_files/modem/lte/rrc/efs/data_inactivity_controldata_inactivity_control unverified
LTE setting: LTE RRC / L1 / L2
0x01000000140000003075000060ea0000c0d40100
/nv/item_files/modem/lte/rrc/efs/lfs_sort_per_band_priolfs_sort_per_band_prio unverified
LTE setting: LTE RRC / L1 / L2
0x01006e00
/nv/item_files/modem/lte/rrc/efs/cust_signature_scg_failure_info_nrcust_signature_scg_failure_info_nr unverified
LTE setting: LTE RRC / L1 / L2
0x0100
/nv/item_files/modem/lte/ML1/fr2_priority_optimizationfr2_priority_optimization unverified
LTE setting: LTE RRC / L1 / L2
0x01000000960000002800000000000000
/nv/item_files/gps/cgps/sm/aagps_positioning_modes_supported_extaagps_positioning_modes_supported_ext unverified
GNSS setting: GNSS / location
0x0000000000000000
/nv/item_files/modem/nr5g/RRC/cap_control_t_plus_f_band_combosNR TDD+FDD combo control likely
Enables NR-CA/NR-DC TDD+FDD band-combo classes
0x00
/nv/item_files/modem/mav/mav_cm_cs_shutdown_plmn_listCS shutdown PLMNs likely
PLMNs whose 2G/3G circuit-switched network is shut down (count byte, then 3-byte BCD PLMNs)
0x0413005113008213008313001400000000000000000000000000000000000000…
/nv/item_files/modem/nr5g/RRC/cap_srs_carrier_switch_per_plmn_control_v2cap_srs_carrier_switch_per_plmn_control_v2 likely
NR UE capability: NR RRC UE-capability toggle
0x01ffffff00000000000000000000000000000000000000000000000000000000…
/nv/item_files/ims/media_service_configIMS media service config unverified
IMS media (codec/RTP) service config; no public schema
0x062e000000000101000014000000000000000000000000000000000000000000…
/nv/item_files/modem/nr5g/RRC/cap_feature_band_nrNR band capability likely
NR band feature-capability list; proprietary layout
0x00020000
/nv/item_files/modem/mmode/mode_prefmode_pref unverified
Multimode setting: Call manager / system determination
0x5c000000
/mav/mav_police_pri_mode_pref_maskMode preference police mask unverified
Apple mask over the PRI mode preference
0x5c000000
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/lte/rrc/bbq/fake_enodeb_exception_plmn_listFake eNodeB exception PLMNs likely
PLMNs exempt from fake-eNodeB mitigation (count byte, then 3-byte BCD PLMNs)
0x0c13003813001213031205f59503222703322735f03144f05537f09205f51117…
NV 1920AAGPS Positioning Modes Supported likely0x01000000
PROT_NV · 21 items P12
ItemWhat it isValue
/mav/bbcfg_file_hash_protocol_static_nvbbcfg_file_hash_protocol_static_nv likely
Baseband defaults digest: Digest of the bbcfg.mbn blob these defaults came from, kept in EFS so the modem knows which set it holds
0xa8de8ff36b141bbd06b12f30f72bd8fb536cbf61
/nv/item_files/gps/cgps/me/gnss_bds_path_lossgnss_bds_path_loss unverified
GNSS setting: GNSS / location
0x1a
/nv/item_files/gps/cgps/me/gnss_gal_path_lossgnss_gal_path_loss unverified
GNSS setting: GNSS / location
0x1d
/nv/item_files/gps/cgps/sm/aagps_positioning_modes_supported_extaagps_positioning_modes_supported_ext unverified
GNSS setting: GNSS / location
0x0000000000000000
/nv/item_files/mcs/lmtsmgr/gnss/gnss_nr_configgnss_nr_config likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0xca00000068864800003e49000000000000000000070000000400000000000000…
/nv/item_files/gps/cgps/me/gnss_multiband_configurationgnss_multiband_configuration unverified
GNSS setting: GNSS / location
0x00000000
/nv/item_files/modem/nr5g/RRC/cap_pc2_control_v2cap_pc2_control_v2 likely
NR UE capability: NR RRC UE-capability toggle
0x0fffffff000013f0ff010113f1ff010113f2ff010113f3ff010113f4ff010113…
/nv/item_files/modem/nr5g/ML1/srch_sensor_bmsrch_sensor_bm unverified
NR5G setting: NR5G RRC / L1
0x0101
/nv/item_files/modem/nas/mm5g_set_for_bit_init_regmm5g_set_for_bit_init_reg unverified
NAS setting: NAS mobility management / PLMN selection
0x01
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/mmode/sd/mcc_list_emerg_call_full_srvmcc_list_emerg_call_full_srv unverified
Multimode setting: Call manager / system determination
0xb8010000b9010000000000000000000000000000
NV 68760x0000010001
NV 68760x0000010001
NV 68760x0000010001
NV 1920AAGPS Positioning Modes Supported likely0x01000000
NV 70x3000
NV 80x6d
NV 4490x1f
NV 67630x1c
NV 67640x1e
NV 67650x1f
PROT_NV · 22 items P13
ItemWhat it isValue
/mav/bbcfg_file_hash_protocol_static_nvbbcfg_file_hash_protocol_static_nv likely
Baseband defaults digest: Digest of the bbcfg.mbn blob these defaults came from, kept in EFS so the modem knows which set it holds
0x945b2b86e5067082bac2ca02acd37944bb7ade63
/nv/item_files/gps/cgps/me/gnss_bds_path_lossgnss_bds_path_loss unverified
GNSS setting: GNSS / location
0x1a
/nv/item_files/gps/cgps/me/gnss_gal_path_lossgnss_gal_path_loss unverified
GNSS setting: GNSS / location
0x1d
/nv/item_files/gps/cgps/sm/aagps_positioning_modes_supported_extaagps_positioning_modes_supported_ext unverified
GNSS setting: GNSS / location
0x0000000000000000
/nv/item_files/mcs/lmtsmgr/gnss/gnss_nr_configgnss_nr_config likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x0000000000000000000000000000000000000000000000000000000000000000…
/nv/item_files/gps/cgps/me/gnss_multiband_configurationgnss_multiband_configuration unverified
GNSS setting: GNSS / location
0x27000000
/cgps/nv/item_files/me/gnss_pga_backoff_configgnss_pga_backoff_config unverified
GNSS setting: GNSS / location
0x01000000
/nv/item_files/modem/nr5g/RRC/cap_pc2_control_v2cap_pc2_control_v2 likely
NR UE capability: NR RRC UE-capability toggle
0x0fffffff000013f0ff010113f1ff010113f2ff010113f3ff010113f4ff010113…
/nv/item_files/modem/nr5g/ML1/srch_sensor_bmsrch_sensor_bm unverified
NR5G setting: NR5G RRC / L1
0x0101
/nv/item_files/modem/nas/mm5g_set_for_bit_init_regmm5g_set_for_bit_init_reg unverified
NAS setting: NAS mobility management / PLMN selection
0x01
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/mmode/sd/mcc_list_emerg_call_full_srvmcc_list_emerg_call_full_srv unverified
Multimode setting: Call manager / system determination
0xb8010000b9010000000000000000000000000000
NV 68760x0000010001
NV 68760x0000010001
NV 68760x0000010001
NV 1920AAGPS Positioning Modes Supported likely0x01000000
NV 70x3000
NV 80x6d
NV 4490x1f
NV 67630x1c
NV 67640x1e
NV 67650x1f
SHPNG · 169 items P0
ItemWhat it isValue
/mav/bbcfg_file_hash_common_shipping_settingbbcfg_file_hash_common_shipping_setting likely
Baseband defaults digest: Digest of the bbcfg.mbn blob these defaults came from, kept in EFS so the modem knows which set it holds
0x92a87acaec5b66ee9779e98df35e8f87004d2cd4
/nv/item_files/modem/mmode/mode_prefmode_pref unverified
Multimode setting: Call manager / system determination
0x5f000000
/nv/item_files/modem/mmode/mode_prefmode_pref unverified
Multimode setting: Call manager / system determination
0x5f000000
/nv/item_files/modem/mmode/mode_prefmode_pref unverified
Multimode setting: Call manager / system determination
0x5f000000
/nv/item_files/modem/mmode/ue_usage_settingUE usage setting likely
TS 24.301 UE usage setting
Voice centric 0x00
/nv/item_files/modem/mmode/ue_usage_settingUE usage setting likely
TS 24.301 UE usage setting
Data centric 0x01
/nv/item_files/modem/mmode/ue_usage_settingUE usage setting likely
TS 24.301 UE usage setting
Data centric 0x01
/nv/item_files/Thin_UI/enable_thin_ui_cfgThin UI config unverified
Enable the Thin UI (headless) configuration read by MMOC
Off 0x00
/nv/item_files/Thin_UI/enable_thin_ui_cfgThin UI config unverified
Enable the Thin UI (headless) configuration read by MMOC
On 0x01
/nv/item_files/Thin_UI/enable_thin_ui_cfgThin UI config unverified
Enable the Thin UI (headless) configuration read by MMOC
On 0x01
/nv/item_files/modem/mmode/qmi/incom_evt_resendincom_evt_resend unverified
Multimode setting: Call manager / system determination
0xd00714
/nv/item_files/mcs/tcxomgr/xo_crystal_typexo_crystal_type unverified
XO manager setting: Crystal oscillator (TCXO / XO) calibration and type
0x02000000
/nv/item_files/mcs/tcxomgr/xo_crystal_typexo_crystal_type unverified
XO manager setting: Crystal oscillator (TCXO / XO) calibration and type
0x02000000
/nv/item_files/mcs/tcxomgr/xo_crystal_typexo_crystal_type unverified
XO manager setting: Crystal oscillator (TCXO / XO) calibration and type
0x02000000
/nv/item_files/modem/lte/common/ca_disableca_disable unverified
LTE setting: LTE RRC / L1 / L2
0x00
/nv/item_files/modem/lte/common/ca_disableca_disable unverified
LTE setting: LTE RRC / L1 / L2
0x00
/nv/item_files/modem/hdr/srch/hdr_acq_div_enablehdr_acq_div_enable unverified
EV-DO setting: CDMA EV-DO (HDR) MAC / search
0x01
/nv/item_files/modem/hdr/srch/hdr_acq_div_thresh0hdr_acq_div_thresh0 unverified
EV-DO setting: CDMA EV-DO (HDR) MAC / search
0xa1ff
/nv/item_files/modem/hdr/srch/hdr_acq_div_thresh1hdr_acq_div_thresh1 unverified
EV-DO setting: CDMA EV-DO (HDR) MAC / search
0x9cff
/nv/item_files/modem/hdr/mac/hdr_dtx_cfghdr_dtx_cfg unverified
EV-DO setting: CDMA EV-DO (HDR) MAC / search
0x0000
/nv/item_files/modem/hdr/mac/hdr_dtx_cfghdr_dtx_cfg unverified
EV-DO setting: CDMA EV-DO (HDR) MAC / search
0x0700
/nv/item_files/modem/hdr/mac/hdr_dtx_cfghdr_dtx_cfg unverified
EV-DO setting: CDMA EV-DO (HDR) MAC / search
0x0700
/nv/item_files/modem/mmode/qmi/no_wait_respno_wait_resp unverified
Multimode setting: Call manager / system determination
0x01
/nv/item_files/modem/mmode/qmi/no_wait_respno_wait_resp unverified
Multimode setting: Call manager / system determination
0x01
/nv/item_files/modem/mmode/qmi/no_wait_respno_wait_resp unverified
Multimode setting: Call manager / system determination
0x01
/mmode/cmcall/cdma_voice_call_collisionCDMA voice call collision unverified
Call-manager handling of colliding CDMA voice calls
0x00010000
/mmode/cmcall/cdma_voice_call_collisionCDMA voice call collision unverified
Call-manager handling of colliding CDMA voice calls
0x00010000
/mmode/cmcall/cdma_voice_call_collisionCDMA voice call collision unverified
Call-manager handling of colliding CDMA voice calls
0x00010000
/nv/item_files/gps/cgps/me/gnss_bds_b2a_path_lossgnss_bds_b2a_path_loss unverified
GNSS setting: GNSS / location
0x2a
/nv/item_files/gps/cgps/me/gnss_configgnss_config unverified
GNSS setting: GNSS / location
0x53080000
/nv/item_files/gps/cgps/me/gnss_gal_E5a_path_lossgnss_gal_E5a_path_loss unverified
GNSS setting: GNSS / location
0x2c
/nv/item_files/gps/cgps/me/gnss_gps_L5_path_lossgnss_gps_L5_path_loss unverified
GNSS setting: GNSS / location
0x29
/nv/item_files/gps/cgps/me/gnss_me_rfgd_gps2glo_nsgnss_me_rfgd_gps2glo_ns unverified
GNSS setting: GNSS / location
0xae436c45a4306c45d7236c45d78b6c4514066d45e1fa6b45c3096c45ec016c45…
/nv/item_files/gps/cgps/sm/gnss_sm_agps_featuresgnss_sm_agps_features unverified
GNSS setting: GNSS / location
0x02000000
/nv/item_files/gps/cgps/me/gnss_me_E1toE5a_rfgd_nsgnss_me_E1toE5a_rfgd_ns unverified
GNSS setting: GNSS / location
0xf7180000
/nv/item_files/gps/cgps/me/gnss_me_L1toL5_rfgd_nsgnss_me_L1toL5_rfgd_ns unverified
GNSS setting: GNSS / location
0xb41e0000
/nv/item_files/gps/cgps/me/gnss_me_B1itoB2a_rfgd_nsgnss_me_B1itoB2a_rfgd_ns unverified
GNSS setting: GNSS / location
0x8f180000
/nv/item_files/gps/cgps/me/gnss_me_e911_constellation_disablementgnss_me_e911_constellation_disablement unverified
GNSS setting: GNSS / location
0x00
/nv/item_files/gps/cgps/me/gnss_me_forced_mb_engagement_configgnss_me_forced_mb_engagement_config unverified
GNSS setting: GNSS / location
0x0000
/nv/item_files/gps/cgps/me/gnss_me_rfgd_bds_nsgnss_me_rfgd_bds_ns unverified
GNSS setting: GNSS / location
0x24060000
/nv/item_files/gps/cgps/me/gnss_me_rfgd_gps2gal_nsgnss_me_rfgd_gps2gal_ns unverified
GNSS setting: GNSS / location
0xbc050000
/cgps/nv/item_files/me/gnss_me_rfgd_glo_uncertainty_nsgnss_me_rfgd_glo_uncertainty_ns unverified
GNSS setting: GNSS / location
0x204e
/nv/item_files/gps/cgps/me/gnss_me_power_optimized_acq_configgnss_me_power_optimized_acq_config unverified
GNSS setting: GNSS / location
0x00000000
/nv/item_files/gps/cgps/sm/assisted_bds_protocol_enable_maskassisted_bds_protocol_enable_mask unverified
GNSS setting: GNSS / location
0x00000000
/nv/item_files/gps/cgps/sm/gnss_assisted_glo_protocol_selectgnss_assisted_glo_protocol_select unverified
GNSS setting: GNSS / location
0x00000000
/nv/item_files/gps/cgps/sm/gnss_concurrent_sessions_support_configgnss_concurrent_sessions_support_config unverified
GNSS setting: GNSS / location
0x01000000
/nv/item_files/gps/cgps/sm/gnss_emergency_support_configgnss_emergency_support_config unverified
GNSS setting: GNSS / location
0x03000000
/nv/item_files/gps/cgps/sm/gnss_lock_ctrl_for_oemgnss_lock_ctrl_for_oem unverified
GNSS setting: GNSS / location
0x01000000
/nv/item_files/gps/cgps/sm/gnss_lpp_enablegnss_lpp_enable unverified
GNSS setting: GNSS / location
0x0b
/nv/item_files/gps/cgps/sm/gnss_lppe_cp_configgnss_lppe_cp_config unverified
GNSS setting: GNSS / location
0x00000000
/nv/item_files/gps/cgps/sm/gnss_lppe_up_configgnss_lppe_up_config unverified
GNSS setting: GNSS / location
0x00000000
/nv/item_files/gps/cgps/sm/gnss_sm_sha_tls_supportgnss_sm_sha_tls_support unverified
GNSS setting: GNSS / location
0x01000000
/cgps/nv/item_files/pe/gnss_rti_health_expiration_periodgnss_rti_health_expiration_period unverified
GNSS setting: GNSS / location
0xa8000000
/nv/item_files/gps/cgps/sm/gnss_supl_udp_enable_selectgnss_supl_udp_enable_select unverified
GNSS setting: GNSS / location
0x02
/nv/item_files/rfnv/000295690x789c4dccc10a80300c03d0649de8658278f3e8c5f91b7e7abf4c06a34d4f7984…
/nv/item_files/modem/mcs/cfcm/ezefs/cfcm_dsccfcm_dsc likely
CFCM flow control: Central flow control for thermal, CPU and DDR-bandwidth mitigation
0x01
/mav/cpms_feature_togglecpms_feature_toggle likely
CPMS power control: Modem peak-power / thermal controller
0x01
/mav/cpms_dbg_msg_togglecpms_dbg_msg_toggle likely
CPMS power control: Modem peak-power / thermal controller
0x01
/mav/cpms_sidefire_mitigationscpms_sidefire_mitigations likely
CPMS power control: Modem peak-power / thermal controller
0x01
/nv/item_files/mcs/lmtsmgr/vbatt/vbatt_lte_limitvbatt_lte_limit likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x02007800e900cf00df00cb00b80bb20c3200dc00c200d200be00f00aea0b3200…
/nv/item_files/mcs/lmtsmgr/vbatt/vbatt_nr5g_limitvbatt_nr5g_limit likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x0200b600e900cf00df00cb00b80bb20c3200dc00c200d200be00f00aea0b3200…
/nv/item_files/mcs/lmtsmgr/vbatt/vbatt_gsm_limitvbatt_gsm_limit likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x02002b002a011b013b013b01b80bb20c32001d010e013b013b01f00aea0b3200…
/nv/item_files/modem/nr5g/ML1/fc_bcl_slow_path_extfc_bcl_slow_path_ext unverified
NR5G setting: NR5G RRC / L1
0x00
/nv/item_files/mcs/lmtsmgr/wwpwr_est/wwpwr_est_lte_pawwpwr_est_lte_pa likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x0200000013001300130013001500150007000700160016001600160017001700…
/nv/item_files/mcs/lmtsmgr/wwpwr_est/wwpwr_est_nr_pawwpwr_est_nr_pa likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x0200000013001300130013001500150007000700160016001600160017001700…
/nv/item_files/mcs/lmtsmgr/wwpwr_est/wwpwr_est_wcdma_pawwpwr_est_wcdma_pa likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x0200000017001700170017001700170017001700210021002100210021002100…
/nv/item_files/mcs/lmtsmgr/wwpwr_est/wwpwr_est_lte_elnawwpwr_est_lte_elna likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x020000000a000a000a000a00
/nv/item_files/mcs/lmtsmgr/wwpwr_est/wwpwr_est_nr_elnawwpwr_est_nr_elna likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x020000000a000a000a000a00
/nv/item_files/mcs/lmtsmgr/wwpwr_est/wwpwr_est_wcdma_elnawwpwr_est_wcdma_elna likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x020000000a000a000a000a00
/nv/item_files/mcs/lmtsmgr/wwpwr_est/wwpwr_est_togglewwpwr_est_toggle likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x01000000
/nv/item_files/modem/nr5g/L2/mac/ul_tx_backofful_tx_backoff unverified
NR5G setting: NR5G RRC / L1
0x01001e0003000a0082000000983a0000
/nv/item_files/modem/lte/L2/mac/lte_mac_ul_throttle_min_ratelte_mac_ul_throttle_min_rate unverified
LTE setting: LTE RRC / L1 / L2
0xb80b
/nv/item_files/modem/maverick/uim/apps/sub_slot_mapping_overrideSubscription-slot mapping override likely
Overrides which SIM slot backs each subscription
0x000000
/nv/item_files/modem/lte/ML1/rsrp_boost_cfgrsrp_boost_cfg unverified
LTE setting: LTE RRC / L1 / L2
0x030301
/nv/item_files/modem/mmode/sd/sub_scan_scopesub_scan_scope unverified
Multimode setting: Call manager / system determination
0x0a00
/nv/item_files/mcfg/mcfg_refresh_timermcfg_refresh_timer unverified
MCFG setting: Modem configuration (MBN) selection and refresh
0x0a
/nv/item_files/mcfg/mcfg_refresh_timer_Subscription02mcfg_refresh_timer_Subscription02 unverified
MCFG setting: Modem configuration (MBN) selection and refresh
0x0a
/nv/item_files/modem/mav/mav_gsm_disable_mcc_listGSM-disabled MCCs likely
MCCs where GSM is not used (count byte, then uint16 MCCs; bbcfg ships 440, 441, 466, 525)
0x04b801b901d2010d020000000000000000000000000000000000000000000000…
NV 62005PRI revision
Packed PRI Revision header
0.0.0 0x00000000
NV 62033GRI revision
Packed GRI Revision header
0.0.0 0x00000000
NV 5280Disable CM Call Type likely0x0200000000000000
NV 8800x01
NV 8810x01
NV 8820x00
NV 10300x02
NV 10310x02
NV 36280x00
NV 42090x00
NV 520000x0100
NV 58021NV 58021 unverified0xf7
NV 25090x0a
NV 9110x0a
NV 38520x3e
NV 3649WCDMA RRC Version likely0x05
NV 41730x01
NV 50900x01
NV 25100x01
NV 41570x00
NV 41580x00
NV 8180xc1
NV 34580x00000000000000000000000000
NV 35150xabffa1ff
NV 36320x0000224800000000
NV 4102CDMA SO68 Enabled likely0x01
NV 42040x00
NV 850Service domain preference likelyCS + PS 0x0200
NV 646490x00000000
NV 740x0000
NV 740x0101
NV 740x0101
NV 4530x00
NV 4530x01
NV 4530x01
NV 500060x06
NV 500060x05
NV 500060x05
NV 645640x030000006400640000000000640032140800000000000000
NV 645640x000000006400640000000000640032140800000000000000
NV 645640x000000006400640000000000640032140800000000000000
NV 646480x003700380139013a003e003f0040000000000000
NV 646480x003700380039003a003e003f0040000000000000
NV 646480x003700380039003a003e003f0040000000000000
NV 646600x0101ffff
NV 646600xffffffff
NV 646600xffffffff
NV 500350x01000000
NV 500350x01000000
NV 500350x01000000
NV 646340x00
NV 646340x01
NV 646340x01
NV 500340x00
NV 500340x01
NV 500340x01
NV 646190x01
NV 646190x00
NV 646190x00
NV 646700x3f
NV 646700x00
NV 646700x00
NV 38510x10
NV 38510x05
NV 38510x05
NV 47220x09
NV 47220x03
NV 47220x03
NV 6Mobile CAI Revision Number likely0x06
NV 6Mobile CAI Revision Number likely0x06
NV 562Preferred Hybrid Mode likely0x01
NV 562Preferred Hybrid Mode likely0x01
NV 562Preferred Hybrid Mode likely0x01
NV 10180x916c
NV 10180x0100
NV 10180x0100
NV 42310x00000000000000000100000000000000
NV 42310x00000000000000008100000000000000
NV 42310x00000000000000008100000000000000
NV 500400x00
NV 500400x00
NV 500400x00
NV 4490x21
NV 4520x03000000
NV 16240x640a
NV 17130x6e0a
NV 19290x00
NV 19400x01
NV 19600x00
NV 55960x00
NV 6264CGPS Minimum GPS Week Number likely0x5f080000
Package details and members (17)
Chip ID0x001440E1
SBL0xAB00CB22
Restore SBL0xAB10CB22
aop.mbn144.8 KiB
xbl_cfg.elf47.1 KiB
sec.elf12.1 KiB
restoresbl1.mbn444.8 KiB
sbl1.mbn452.8 KiB
multi_image_qti.mbn12.3 KiB
apps.mbn2.32 MiB
qdsp6sw.mbn78.83 MiB
hyp.mbn89.0 KiB
multi_image.mbn12.4 KiB
apdp.mbn13.2 KiB
acdb.mbn256.1 KiB
devcfg.mbn35.2 KiB
tz.mbn876.0 KiB
Info.plist1.1 KiB
bbcfg.mbn52.11 MiB
Options.plist0 B
Diff: Mav21 in another image
789 carriers, 225 countries · iOS 27.0.1 (24A446) · beta iOS 27.2 beta 2 (24B5089g) GitHub Ready