carrier-explode iOS carrier and country bundles
iOS version
CarriersPolicy filesNetwork databasesConfigsDiff

Mav20-6.51.04.Release.bbfw

Load order: the modem's built-in config, then bbcfg.mbn's per-platform defaults, then the bundle's .der.pri.

Carriers with band combos (0)

From band_combos_per_plmn.xml, with the bundles the OTA manifest routes each PLMN to.

No band_combos_per_plmn.xml in this package.

Policy files (32)

Plaintext EFS files the package writes. A repeated path has one copy per platform or config.

PathFromServes
/policyman/carrier_policy.xml ROWbbcfg.mbnP1P4P5P6P9P10
/data/3gpp/data_3gpp_config.xml bbcfg.mbnP1P5P6
/policyman/dss_feature_restrictions.xml DSS FEATURE RESTRICTIONbbcfg.mbnP1P4P5P6P9P10
/policyman/5g_msim_feature_enabled.xml feature control for 5G MSIMbbcfg.mbnP1P4P5P6P9P10
/policyman/5g_msim_restriction.xml 5G-MSIM Roaming restrictionbbcfg.mbnP1P4P5P6P9P10
/policyman/5g_roaming_feature_enabled.xml 5G Roaming feature enablementbbcfg.mbnP1P4P5P6P9P10
/policyman/5g_roaming_restriction.xml 5G roaming restrictionbbcfg.mbnP1P4P5P6P9P10
/policyman/5g_sa_roaming_feature_enabled.xml 5G SA Roaming feature enablementbbcfg.mbnP1P4P5P6P9P10
/nv/rfnv/64628.xml bbcfg.mbnP1 ×3P5 ×14
/nv/rfnv/64630.xml bbcfg.mbnP1 ×3P5 ×14
/data/3gpp/data_3gpp_config.xml bbcfg.mbnP4P9P10
/nv/rfnv/64628.xml bbcfg.mbnP4 ×14
/nv/rfnv/64628.xml bbcfg.mbnP4 ×2
/nv/rfnv/64628.xml bbcfg.mbnP5 ×2
/nv/rfnv/64630.xml bbcfg.mbnP5 ×2
/nv/rfnv/64628.xml bbcfg.mbnP6 ×14
/nv/rfnv/64630.xml bbcfg.mbnP6 ×14
/nv/rfnv/64628.xml bbcfg.mbnP6 ×2
/nv/rfnv/64630.xml bbcfg.mbnP6 ×2
/policyman/rat_cap_base_policy.xml RAT CAP BASE RESETbbcfg.mbnP9P10
/nv/rfnv/64628.xml bbcfg.mbnP9 ×12P10 ×12
/policyman/china_msim_lna_protection.xml China MSIM LNA Protectionqdsp6sw.mbn SR_DSDS-SDX55
/policyman/generic_band_restrictions.xml Generic Band Restrictionsqdsp6sw.mbn SR_DSDS-SDX55
/policyman/post_defines.xml Common Definitions for Post XMLsqdsp6sw.mbn SR_DSDS-SDX55SR_MSSS-SDX55
/policyman/hardware_band_filtering.xml qdsp6sw.mbn SR_DSDS-SDX55SR_MSSS-SDX55
/policyman/nr_msim_concurrency.xml 5G MSIM Concurrency bandsqdsp6sw.mbn SR_DSDS-SDX55
/policyman/nr_msim_sub_capability_based_band_restriction.xml NR BAND restrictions in MSIM based on SUB capabilityqdsp6sw.mbn SR_DSDS-SDX55
/policyman/device_config.xml Dual SIM Device Configqdsp6sw.mbn SR_DSDS-SDX55
/policyman/policies.xml XML Orderingqdsp6sw.mbn SR_DSDS-SDX55
/policyman/generic_band_restrictions.xml Generic Band Restrictionsqdsp6sw.mbn SR_MSSS-SDX55
/policyman/device_config.xml Single SIM Device Configqdsp6sw.mbn SR_MSSS-SDX55
/policyman/policies.xml XML Orderingqdsp6sw.mbn SR_MSSS-SDX55
/data/3gpp/data_3gpp_config.xml xml, bbcfg.mbn, 433 B
condition action definition · underlined names explain themselves
version 1.0
value=5G
IndConfig 1
Config SIB2_OR_SCG
Timer1 30
Timer2 30
KeepTimerOnULI 1
ChkRoaming 0
Network databases

Modem settings

SettingValueServes
Device mode likely
/nv/item_files/modem/mmode/device_mode
dual SIM, dual standby (DSDS) 0x01 SR_DSDS-SDX55
Device mode likely
/nv/item_files/modem/mmode/device_mode
single SIM 0x00 SR_MSSS-SDX55
Modem configs and containers

Built into the modem image (qdsp6sw.mbn)

LabelTypeVersionCapabilityFiles
CUST_SW_DEFAULTSW0ae00001
0
CUST_HW_DEFAULTHW0ae10100
0
(unlabelled)SWee000103
2
/multi_mbn/HW-DSDS.mbn
/multi_mbn/HW-MSSS.mbn
SR_DSDS-SDX55HW0a00890001000000
10
/policyman/china_msim_lna_protection.xml
/policyman/generic_band_restrictions.xml
/policyman/post_defines.xml
/policyman/hardware_band_filtering.xml
/policyman/nr_msim_concurrency.xml
/policyman/nr_msim_sub_capability_based_band_restriction.xml
/policyman/device_config.xml
/mdb/policyman/mcc2arfcn.mdb
/policyman/policies.xml
/nv/item_files/modem/mmode/device_mode
SR_MSSS-SDX55HW0a00890001000000
7
/policyman/generic_band_restrictions.xml
/policyman/post_defines.xml
/policyman/hardware_band_filtering.xml
/policyman/device_config.xml
/mdb/policyman/mcc2arfcn.mdb
/policyman/policies.xml
/nv/item_files/modem/mmode/device_mode
What bbcfg.mbn holds (13 blob types)
TypeNameBlobsRecordsHolds
4STAT_NV?unverified7575RF static NV list
5type 53650
6type 62228
7STAT_CFG?likely6969MAVZ MCFG HW image, /rfc/<id>_0_{res,cmn}.dat (sub-6 RF card)
8RFFE_DEV7575EFS /rfc/device_settings/*
9RFFE_LUT7575EFS /rfc/device_lut/*
10RFC_MMW732MAVZ MCFG HW image, /rfc/29xx (mmWave RF card)
11type 114646
12type 122626
15PROT_NV55protocol static NV/EFS
16type 1622
17PROT_PRI66product PRI defaults: /policyman/*.xml, /data/3gpp/*.xml
20SHPNG11common shipping settings
NV/EFS defaults (12 sets)
PROT_NV · 2 items P1
ItemWhat it isValue
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
NV 1920AAGPS Positioning Modes Supported likely0x29040000
PROT_PRI · 17 items P1
ItemWhat it isValue
/mav/product_pri_setting_revisionProduct PRI revision likely
Revision of the product PRI settings the modem last wrote to EFS
0.3.6 0x00030600
/nv/item_files/modem/maverick/test/mav_test_efs_size_1mav_test_efs_size_1 likely
Apple test item: Modem EFS test item (fixed pattern)
0x05
/nv/item_files/modem/maverick/test/mav_test_efs_size_2mav_test_efs_size_2 likely
Apple test item: Modem EFS test item (fixed pattern)
0x0605
/nv/item_files/modem/maverick/test/mav_test_efs_size_4mav_test_efs_size_4 likely
Apple test item: Modem EFS test item (fixed pattern)
0x08040201
/nv/item_files/modem/nr5g/RRC/failure_mgr_efs_list_cfgfailure_mgr_efs_list_cfg unverified
NR5G setting: NR5G RRC / L1
0x01042c012c0105042c012c0105042c010400780078000500
/nv/item_files/modem/lte/rrc/efs/data_inactivity_controldata_inactivity_control unverified
LTE setting: LTE RRC / L1 / L2
0x01000000140000003075000060ea0000c0d40100
/nv/item_files/modem/lte/rrc/efs/lfs_sort_per_band_priolfs_sort_per_band_prio unverified
LTE setting: LTE RRC / L1 / L2
0x01006e00
/nv/item_files/modem/lte/rrc/efs/cust_signature_scg_failure_info_nrcust_signature_scg_failure_info_nr unverified
LTE setting: LTE RRC / L1 / L2
0x0100
/nv/item_files/modem/nr5g/RRC/meas_pruningmeas_pruning unverified
NR5G setting: NR5G RRC / L1
0x07
/nv/item_files/modem/lte/ML1/fr2_priority_optimizationfr2_priority_optimization unverified
LTE setting: LTE RRC / L1 / L2
0x01000000960000002800000000000000
/nv/item_files/modem/mav/mav_cm_cs_shutdown_plmn_listCS shutdown PLMNs likely
PLMNs whose 2G/3G circuit-switched network is shut down (count byte, then 3-byte BCD PLMNs)
0x0413005113008213008313001400000000000000000000000000000000000000…
/policyman/fullrat_timerfullrat_timer unverified
PolicyMan data: PolicyMan database / flag
0x2c010000785d0200
/nv/item_files/modem/mmode/mode_prefmode_pref unverified
Multimode setting: Call manager / system determination
0x5c000000
/mav/mav_police_pri_mode_pref_maskMode preference police mask unverified
Apple mask over the PRI mode preference
0x5c000000
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/lte/rrc/bbq/fake_enodeb_exception_plmn_listFake eNodeB exception PLMNs likely
PLMNs exempt from fake-eNodeB mitigation (count byte, then 3-byte BCD PLMNs)
0x0c13003813001213031205f59503222703322735f03144f05537f09205f51117…
NV 1920AAGPS Positioning Modes Supported likely0x29040000
PROT_NV · 4 items P4
ItemWhat it isValue
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
NV 70x2300
NV 80x6b
NV 1920AAGPS Positioning Modes Supported likely0x29040000
PROT_PRI · 17 items P4
ItemWhat it isValue
/mav/product_pri_setting_revisionProduct PRI revision likely
Revision of the product PRI settings the modem last wrote to EFS
0.3.6 0x00030600
/nv/item_files/modem/maverick/test/mav_test_efs_size_1mav_test_efs_size_1 likely
Apple test item: Modem EFS test item (fixed pattern)
0x05
/nv/item_files/modem/maverick/test/mav_test_efs_size_2mav_test_efs_size_2 likely
Apple test item: Modem EFS test item (fixed pattern)
0x0605
/nv/item_files/modem/maverick/test/mav_test_efs_size_4mav_test_efs_size_4 likely
Apple test item: Modem EFS test item (fixed pattern)
0x08040201
/nv/item_files/modem/nr5g/RRC/failure_mgr_efs_list_cfgfailure_mgr_efs_list_cfg unverified
NR5G setting: NR5G RRC / L1
0x01042c012c0105042c012c0105042c010400780078000500
/nv/item_files/modem/lte/rrc/efs/data_inactivity_controldata_inactivity_control unverified
LTE setting: LTE RRC / L1 / L2
0x01000000140000003075000060ea0000c0d40100
/nv/item_files/modem/lte/rrc/efs/lfs_sort_per_band_priolfs_sort_per_band_prio unverified
LTE setting: LTE RRC / L1 / L2
0x01006e00
/nv/item_files/modem/lte/rrc/efs/cust_signature_scg_failure_info_nrcust_signature_scg_failure_info_nr unverified
LTE setting: LTE RRC / L1 / L2
0x0100
/nv/item_files/modem/nr5g/RRC/meas_pruningmeas_pruning unverified
NR5G setting: NR5G RRC / L1
0x05
/nv/item_files/modem/lte/ML1/fr2_priority_optimizationfr2_priority_optimization unverified
LTE setting: LTE RRC / L1 / L2
0x01000000960000002800000000000000
/nv/item_files/modem/mav/mav_cm_cs_shutdown_plmn_listCS shutdown PLMNs likely
PLMNs whose 2G/3G circuit-switched network is shut down (count byte, then 3-byte BCD PLMNs)
0x0413005113008213008313001400000000000000000000000000000000000000…
/policyman/fullrat_timerfullrat_timer unverified
PolicyMan data: PolicyMan database / flag
0x2c010000785d0200
/nv/item_files/modem/mmode/mode_prefmode_pref unverified
Multimode setting: Call manager / system determination
0x5c000000
/mav/mav_police_pri_mode_pref_maskMode preference police mask unverified
Apple mask over the PRI mode preference
0x5c000000
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/lte/rrc/bbq/fake_enodeb_exception_plmn_listFake eNodeB exception PLMNs likely
PLMNs exempt from fake-eNodeB mitigation (count byte, then 3-byte BCD PLMNs)
0x0c13003813001213031205f59503222703322735f03144f05537f09205f51117…
NV 1920AAGPS Positioning Modes Supported likely0x29040000
PROT_NV · 4 items P5
ItemWhat it isValue
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
NV 70x2d00
NV 80x6b
NV 1920AAGPS Positioning Modes Supported likely0x29040000
PROT_PRI · 17 items P5
ItemWhat it isValue
/mav/product_pri_setting_revisionProduct PRI revision likely
Revision of the product PRI settings the modem last wrote to EFS
0.3.6 0x00030600
/nv/item_files/modem/maverick/test/mav_test_efs_size_1mav_test_efs_size_1 likely
Apple test item: Modem EFS test item (fixed pattern)
0x05
/nv/item_files/modem/maverick/test/mav_test_efs_size_2mav_test_efs_size_2 likely
Apple test item: Modem EFS test item (fixed pattern)
0x0605
/nv/item_files/modem/maverick/test/mav_test_efs_size_4mav_test_efs_size_4 likely
Apple test item: Modem EFS test item (fixed pattern)
0x08040201
/nv/item_files/modem/nr5g/RRC/failure_mgr_efs_list_cfgfailure_mgr_efs_list_cfg unverified
NR5G setting: NR5G RRC / L1
0x01042c012c0105042c012c0105042c010400780078000500
/nv/item_files/modem/lte/rrc/efs/data_inactivity_controldata_inactivity_control unverified
LTE setting: LTE RRC / L1 / L2
0x01000000140000003075000060ea0000c0d40100
/nv/item_files/modem/lte/rrc/efs/lfs_sort_per_band_priolfs_sort_per_band_prio unverified
LTE setting: LTE RRC / L1 / L2
0x01006e00
/nv/item_files/modem/lte/rrc/efs/cust_signature_scg_failure_info_nrcust_signature_scg_failure_info_nr unverified
LTE setting: LTE RRC / L1 / L2
0x0100
/nv/item_files/modem/nr5g/RRC/meas_pruningmeas_pruning unverified
NR5G setting: NR5G RRC / L1
0x05
/nv/item_files/modem/lte/ML1/fr2_priority_optimizationfr2_priority_optimization unverified
LTE setting: LTE RRC / L1 / L2
0x01000000960000002800000000000000
/nv/item_files/modem/mav/mav_cm_cs_shutdown_plmn_listCS shutdown PLMNs likely
PLMNs whose 2G/3G circuit-switched network is shut down (count byte, then 3-byte BCD PLMNs)
0x0413005113008213008313001400000000000000000000000000000000000000…
/policyman/fullrat_timerfullrat_timer unverified
PolicyMan data: PolicyMan database / flag
0x2c010000785d0200
/nv/item_files/modem/mmode/mode_prefmode_pref unverified
Multimode setting: Call manager / system determination
0x5c000000
/mav/mav_police_pri_mode_pref_maskMode preference police mask unverified
Apple mask over the PRI mode preference
0x5c000000
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/lte/rrc/bbq/fake_enodeb_exception_plmn_listFake eNodeB exception PLMNs likely
PLMNs exempt from fake-eNodeB mitigation (count byte, then 3-byte BCD PLMNs)
0x0c13003813001213031205f59503222703322735f03144f05537f09205f51117…
NV 1920AAGPS Positioning Modes Supported likely0x29040000
PROT_PRI · 17 items P6
ItemWhat it isValue
/mav/product_pri_setting_revisionProduct PRI revision likely
Revision of the product PRI settings the modem last wrote to EFS
0.3.6 0x00030600
/nv/item_files/modem/maverick/test/mav_test_efs_size_1mav_test_efs_size_1 likely
Apple test item: Modem EFS test item (fixed pattern)
0x05
/nv/item_files/modem/maverick/test/mav_test_efs_size_2mav_test_efs_size_2 likely
Apple test item: Modem EFS test item (fixed pattern)
0x0605
/nv/item_files/modem/maverick/test/mav_test_efs_size_4mav_test_efs_size_4 likely
Apple test item: Modem EFS test item (fixed pattern)
0x08040201
/nv/item_files/modem/nr5g/RRC/failure_mgr_efs_list_cfgfailure_mgr_efs_list_cfg unverified
NR5G setting: NR5G RRC / L1
0x01042c012c0105042c012c0105042c010400780078000500
/nv/item_files/modem/lte/rrc/efs/data_inactivity_controldata_inactivity_control unverified
LTE setting: LTE RRC / L1 / L2
0x01000000140000003075000060ea0000c0d40100
/nv/item_files/modem/lte/rrc/efs/lfs_sort_per_band_priolfs_sort_per_band_prio unverified
LTE setting: LTE RRC / L1 / L2
0x01006e00
/nv/item_files/modem/lte/rrc/efs/cust_signature_scg_failure_info_nrcust_signature_scg_failure_info_nr unverified
LTE setting: LTE RRC / L1 / L2
0x0100
/nv/item_files/modem/nr5g/RRC/meas_pruningmeas_pruning unverified
NR5G setting: NR5G RRC / L1
0x05
/nv/item_files/modem/lte/ML1/fr2_priority_optimizationfr2_priority_optimization unverified
LTE setting: LTE RRC / L1 / L2
0x01000000960000002800000000000000
/nv/item_files/modem/mav/mav_cm_cs_shutdown_plmn_listCS shutdown PLMNs likely
PLMNs whose 2G/3G circuit-switched network is shut down (count byte, then 3-byte BCD PLMNs)
0x0413005113008213008313001400000000000000000000000000000000000000…
/policyman/fullrat_timerfullrat_timer unverified
PolicyMan data: PolicyMan database / flag
0x2c010000785d0200
/nv/item_files/modem/mmode/mode_prefmode_pref unverified
Multimode setting: Call manager / system determination
0x5c000000
/mav/mav_police_pri_mode_pref_maskMode preference police mask unverified
Apple mask over the PRI mode preference
0x5c000000
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/lte/rrc/bbq/fake_enodeb_exception_plmn_listFake eNodeB exception PLMNs likely
PLMNs exempt from fake-eNodeB mitigation (count byte, then 3-byte BCD PLMNs)
0x0c13003813001213031205f59503222703322735f03144f05537f09205f51117…
NV 1920AAGPS Positioning Modes Supported likely0x29040000
PROT_NV · 4 items P9
ItemWhat it isValue
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
NV 70x0f00
NV 80x6d
NV 1920AAGPS Positioning Modes Supported likely0x01000000
PROT_PRI · 17 items P9
ItemWhat it isValue
/mav/product_pri_setting_revisionProduct PRI revision likely
Revision of the product PRI settings the modem last wrote to EFS
0.3.6 0x00030600
/nv/item_files/modem/maverick/test/mav_test_efs_size_1mav_test_efs_size_1 likely
Apple test item: Modem EFS test item (fixed pattern)
0x05
/nv/item_files/modem/maverick/test/mav_test_efs_size_2mav_test_efs_size_2 likely
Apple test item: Modem EFS test item (fixed pattern)
0x0605
/nv/item_files/modem/maverick/test/mav_test_efs_size_4mav_test_efs_size_4 likely
Apple test item: Modem EFS test item (fixed pattern)
0x08040201
/nv/item_files/modem/nr5g/RRC/failure_mgr_efs_list_cfgfailure_mgr_efs_list_cfg unverified
NR5G setting: NR5G RRC / L1
0x01042c012c0105042c012c0105042c010400780078000500
/nv/item_files/modem/lte/rrc/efs/data_inactivity_controldata_inactivity_control unverified
LTE setting: LTE RRC / L1 / L2
0x01000000140000003075000060ea0000c0d40100
/nv/item_files/modem/lte/rrc/efs/lfs_sort_per_band_priolfs_sort_per_band_prio unverified
LTE setting: LTE RRC / L1 / L2
0x01006e00
/nv/item_files/modem/lte/rrc/efs/cust_signature_scg_failure_info_nrcust_signature_scg_failure_info_nr unverified
LTE setting: LTE RRC / L1 / L2
0x0100
/nv/item_files/modem/nr5g/RRC/meas_pruningmeas_pruning unverified
NR5G setting: NR5G RRC / L1
0x05
/nv/item_files/modem/lte/ML1/fr2_priority_optimizationfr2_priority_optimization unverified
LTE setting: LTE RRC / L1 / L2
0x01000000960000002800000000000000
/nv/item_files/modem/mav/mav_cm_cs_shutdown_plmn_listCS shutdown PLMNs likely
PLMNs whose 2G/3G circuit-switched network is shut down (count byte, then 3-byte BCD PLMNs)
0x0413005113008213008313001400000000000000000000000000000000000000…
/policyman/fullrat_timerfullrat_timer unverified
PolicyMan data: PolicyMan database / flag
0x2c010000785d0200
/nv/item_files/modem/mmode/mode_prefmode_pref unverified
Multimode setting: Call manager / system determination
0x5c000000
/mav/mav_police_pri_mode_pref_maskMode preference police mask unverified
Apple mask over the PRI mode preference
0x5c000000
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/lte/rrc/bbq/fake_enodeb_exception_plmn_listFake eNodeB exception PLMNs likely
PLMNs exempt from fake-eNodeB mitigation (count byte, then 3-byte BCD PLMNs)
0x0c13003813001213031205f59503222703322735f03144f05537f09205f51117…
NV 1920AAGPS Positioning Modes Supported likely0x01000000
PROT_NV · 4 items P10
ItemWhat it isValue
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
NV 70x1900
NV 80x6d
NV 1920AAGPS Positioning Modes Supported likely0x01000000
PROT_PRI · 17 items P10
ItemWhat it isValue
/mav/product_pri_setting_revisionProduct PRI revision likely
Revision of the product PRI settings the modem last wrote to EFS
0.3.6 0x00030600
/nv/item_files/modem/maverick/test/mav_test_efs_size_1mav_test_efs_size_1 likely
Apple test item: Modem EFS test item (fixed pattern)
0x05
/nv/item_files/modem/maverick/test/mav_test_efs_size_2mav_test_efs_size_2 likely
Apple test item: Modem EFS test item (fixed pattern)
0x0605
/nv/item_files/modem/maverick/test/mav_test_efs_size_4mav_test_efs_size_4 likely
Apple test item: Modem EFS test item (fixed pattern)
0x08040201
/nv/item_files/modem/nr5g/RRC/failure_mgr_efs_list_cfgfailure_mgr_efs_list_cfg unverified
NR5G setting: NR5G RRC / L1
0x01042c012c0105042c012c0105042c010400780078000500
/nv/item_files/modem/lte/rrc/efs/data_inactivity_controldata_inactivity_control unverified
LTE setting: LTE RRC / L1 / L2
0x01000000140000003075000060ea0000c0d40100
/nv/item_files/modem/lte/rrc/efs/lfs_sort_per_band_priolfs_sort_per_band_prio unverified
LTE setting: LTE RRC / L1 / L2
0x01006e00
/nv/item_files/modem/lte/rrc/efs/cust_signature_scg_failure_info_nrcust_signature_scg_failure_info_nr unverified
LTE setting: LTE RRC / L1 / L2
0x0100
/nv/item_files/modem/nr5g/RRC/meas_pruningmeas_pruning unverified
NR5G setting: NR5G RRC / L1
0x05
/nv/item_files/modem/lte/ML1/fr2_priority_optimizationfr2_priority_optimization unverified
LTE setting: LTE RRC / L1 / L2
0x01000000960000002800000000000000
/nv/item_files/modem/mav/mav_cm_cs_shutdown_plmn_listCS shutdown PLMNs likely
PLMNs whose 2G/3G circuit-switched network is shut down (count byte, then 3-byte BCD PLMNs)
0x0413005113008213008313001400000000000000000000000000000000000000…
/policyman/fullrat_timerfullrat_timer unverified
PolicyMan data: PolicyMan database / flag
0x2c010000785d0200
/nv/item_files/modem/mmode/mode_prefmode_pref unverified
Multimode setting: Call manager / system determination
0x5c000000
/mav/mav_police_pri_mode_pref_maskMode preference police mask unverified
Apple mask over the PRI mode preference
0x5c000000
/policyman/private_mcc_handlingprivate_mcc_handling unverified
PolicyMan data: PolicyMan database / flag
0x01
/nv/item_files/modem/lte/rrc/bbq/fake_enodeb_exception_plmn_listFake eNodeB exception PLMNs likely
PLMNs exempt from fake-eNodeB mitigation (count byte, then 3-byte BCD PLMNs)
0x0c13003813001213031205f59503222703322735f03144f05537f09205f51117…
NV 1920AAGPS Positioning Modes Supported likely0x01000000
SHPNG · 124 items P0
ItemWhat it isValue
/nv/item_files/gps/cgps/me/gnss_bds_b2a_path_lossgnss_bds_b2a_path_loss unverified
GNSS setting: GNSS / location
0x30
/nv/item_files/gps/cgps/me/gnss_bds_path_lossgnss_bds_path_loss unverified
GNSS setting: GNSS / location
0x30
/nv/item_files/gps/cgps/me/gnss_configgnss_config unverified
GNSS setting: GNSS / location
0x53080000
/nv/item_files/gps/cgps/me/gnss_gal_E5a_path_lossgnss_gal_E5a_path_loss unverified
GNSS setting: GNSS / location
0x33
/nv/item_files/gps/cgps/me/gnss_gal_path_lossgnss_gal_path_loss unverified
GNSS setting: GNSS / location
0x28
/nv/item_files/gps/cgps/me/gnss_gps_L5_path_lossgnss_gps_L5_path_loss unverified
GNSS setting: GNSS / location
0x30
/nv/item_files/gps/cgps/me/gnss_me_rfgd_gps2glo_nsgnss_me_rfgd_gps2glo_ns unverified
GNSS setting: GNSS / location
0x3d126c45cd146c45a4346c4548156c45c3bd6c4500186c45ecfd6b450a0b6c45…
/nv/item_files/gps/cgps/sm/gnss_sm_agps_featuresgnss_sm_agps_features unverified
GNSS setting: GNSS / location
0x02000000
/nv/item_files/gps/cgps/me/gnss_me_E1toE5a_rfgd_nsgnss_me_E1toE5a_rfgd_ns unverified
GNSS setting: GNSS / location
0xf1180000
/nv/item_files/gps/cgps/me/gnss_me_L1toL5_rfgd_nsgnss_me_L1toL5_rfgd_ns unverified
GNSS setting: GNSS / location
0xac1e0000
/nv/item_files/gps/cgps/me/gnss_me_B1itoB2a_rfgd_nsgnss_me_B1itoB2a_rfgd_ns unverified
GNSS setting: GNSS / location
0x8b180000
/nv/item_files/gps/cgps/me/gnss_me_e911_constellation_disablementgnss_me_e911_constellation_disablement unverified
GNSS setting: GNSS / location
0x00
/nv/item_files/gps/cgps/me/gnss_me_forced_mb_engagement_configgnss_me_forced_mb_engagement_config unverified
GNSS setting: GNSS / location
0x0000
/nv/item_files/gps/cgps/me/gnss_me_rfgd_bds_nsgnss_me_rfgd_bds_ns unverified
GNSS setting: GNSS / location
0x21060000
/nv/item_files/gps/cgps/me/gnss_me_rfgd_gps2gal_nsgnss_me_rfgd_gps2gal_ns unverified
GNSS setting: GNSS / location
0xbb050000
/cgps/nv/item_files/me/gnss_me_rfgd_glo_uncertainty_nsgnss_me_rfgd_glo_uncertainty_ns unverified
GNSS setting: GNSS / location
0x204e
/nv/item_files/gps/cgps/me/gnss_multiband_configurationgnss_multiband_configuration unverified
GNSS setting: GNSS / location
0x07000000
/nv/item_files/gps/cgps/sm/assisted_bds_protocol_enable_maskassisted_bds_protocol_enable_mask unverified
GNSS setting: GNSS / location
0x00000000
/nv/item_files/gps/cgps/sm/gnss_assisted_glo_protocol_selectgnss_assisted_glo_protocol_select unverified
GNSS setting: GNSS / location
0x00000000
/nv/item_files/gps/cgps/sm/gnss_concurrent_sessions_support_configgnss_concurrent_sessions_support_config unverified
GNSS setting: GNSS / location
0x01000000
/nv/item_files/gps/cgps/sm/gnss_emergency_support_configgnss_emergency_support_config unverified
GNSS setting: GNSS / location
0x03000000
/nv/item_files/gps/cgps/sm/gnss_lock_ctrl_for_oemgnss_lock_ctrl_for_oem unverified
GNSS setting: GNSS / location
0x01000000
/nv/item_files/gps/cgps/sm/gnss_lpp_enablegnss_lpp_enable unverified
GNSS setting: GNSS / location
0x03
/nv/item_files/gps/cgps/sm/gnss_lppe_cp_configgnss_lppe_cp_config unverified
GNSS setting: GNSS / location
0x00000000
/nv/item_files/gps/cgps/sm/gnss_lppe_up_configgnss_lppe_up_config unverified
GNSS setting: GNSS / location
0x00000000
/nv/item_files/gps/cgps/sm/gnss_sm_sha_tls_supportgnss_sm_sha_tls_support unverified
GNSS setting: GNSS / location
0x00000000
/cgps/nv/item_files/pe/gnss_rti_health_expiration_periodgnss_rti_health_expiration_period unverified
GNSS setting: GNSS / location
0xa8000000
/nv/item_files/gps/cgps/sm/gnss_supl_udp_enable_selectgnss_supl_udp_enable_select unverified
GNSS setting: GNSS / location
0x02
/cgps/nv/item_files/me/gnss_pga_backoff_configgnss_pga_backoff_config unverified
GNSS setting: GNSS / location
0x01000000
/nv/item_files/rfnv/000295690x789c4dccc10a80300c03d0649de8658278f3e8c5f91b7e7abf4c06a34d4f7984…
/nv/item_files/modem/mcs/cfcm/ezefs/cfcm_dsccfcm_dsc likely
CFCM flow control: Central flow control for thermal, CPU and DDR-bandwidth mitigation
0x01
/mav/cpms_feature_togglecpms_feature_toggle likely
CPMS power control: Modem peak-power / thermal controller
0x01
/mav/cpms_dbg_msg_togglecpms_dbg_msg_toggle likely
CPMS power control: Modem peak-power / thermal controller
0x01
/nv/item_files/modem/mmode/sd/sub_scan_scopesub_scan_scope unverified
Multimode setting: Call manager / system determination
0x0200
/nv/item_files/mcs/lmtsmgr/vbatt/vbatt_lte_limitvbatt_lte_limit likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x02007800e900cf00df00cb00b80bb20c3200dc00c200d200be00f00aea0b3200…
/nv/item_files/mcs/lmtsmgr/vbatt/vbatt_nr5g_limitvbatt_nr5g_limit likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x0200b600e900cf00df00cb00b80bb20c3200dc00c200d200be00f00aea0b3200…
/nv/item_files/mcs/lmtsmgr/vbatt/vbatt_gsm_limitvbatt_gsm_limit likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x02002b002a011b013b013b01b80bb20c32001d010e013b013b01f00aea0b3200…
/nv/item_files/mcs/lmtsmgr/endc/endc_imd_configendc_imd_config likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0xc97a7a01ff8e0101c9787a01ff8e0101c9a8a8ff03800103c87a7a01ff900101…
/nv/item_files/modem/nr5g/ML1/fc_bcl_slow_path_extfc_bcl_slow_path_ext unverified
NR5G setting: NR5G RRC / L1
0x00
/nv/item_files/modem/mcs/cfcm/ezefs/cfcm_monitor_timerscfcm_monitor_timers likely
CFCM flow control: Central flow control for thermal, CPU and DDR-bandwidth mitigation
0x00000000d0070000
/nv/item_files/mcs/lmtsmgr/wwpwr_est/wwpwr_est_lte_pawwpwr_est_lte_pa likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x010000001d001d001d001d0032003200320032001f001f001f001f0032003200…
/nv/item_files/mcs/lmtsmgr/wwpwr_est/wwpwr_est_nr_pawwpwr_est_nr_pa likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x010000001d001d001d001d0032003200320032001f001f001f001f0032003200…
/nv/item_files/mcs/lmtsmgr/wwpwr_est/wwpwr_est_wcdma_pawwpwr_est_wcdma_pa likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x0100000017001700170017001700170017001700210021002100210021002100…
/nv/item_files/mcs/lmtsmgr/wwpwr_est/wwpwr_est_lte_elnawwpwr_est_lte_elna likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x010000000000000000000000
/nv/item_files/mcs/lmtsmgr/wwpwr_est/wwpwr_est_nr_elnawwpwr_est_nr_elna likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x010000000000000000000000
/nv/item_files/mcs/lmtsmgr/wwpwr_est/wwpwr_est_wcdma_elnawwpwr_est_wcdma_elna likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x010000000000000000000000
/nv/item_files/mcs/lmtsmgr/wwpwr_est/wwpwr_est_togglewwpwr_est_toggle likely
Limits manager: Tx power limits for battery voltage, SAR, coexistence and power estimation
0x01000000
/nv/item_files/modem/nr5g/L2/mac/ul_tx_backofful_tx_backoff unverified
NR5G setting: NR5G RRC / L1
0x01001e0003000a0082000000983a0000
/nv/item_files/modem/lte/L2/mac/lte_mac_ul_throttle_min_ratelte_mac_ul_throttle_min_rate unverified
LTE setting: LTE RRC / L1 / L2
0xb80b
/nv/item_files/modem/lte/ML1/rsrp_boost_cfgrsrp_boost_cfg unverified
LTE setting: LTE RRC / L1 / L2
0x030301
/nv/item_files/modem/mmode/sd/mcc_list_emerg_call_full_srvmcc_list_emerg_call_full_srv unverified
Multimode setting: Call manager / system determination
0xb8010000b9010000000000000000000000000000
/nv/item_files/modem/mav/mav_gsm_disable_mcc_listGSM-disabled MCCs likely
MCCs where GSM is not used (count byte, then uint16 MCCs; bbcfg ships 440, 441, 466, 525)
0x04b801b901d2010d020000000000000000000000000000000000000000000000…
/nv/item_files/modem/nas/emm_reject_cs_notification_mmtel_callemm_reject_cs_notification_mmtel_call unverified
NAS setting: NAS mobility management / PLMN selection
0x01
NV 4490x26
NV 4520x03000000
NV 16240x640a
NV 17130x6e0a
NV 19290x00
NV 19400x01
NV 19600x00
NV 55960x00
NV 6264CGPS Minimum GPS Week Number likely0x2f080000
NV 67630x2f
NV 67640x2f
NV 67650x37
NV 5Slot Cycle Index likely0x01
NV 10Mode preference
Digital/Analog Mode Preference
Automatic 0x0400
NV 180x0000
NV 20Primary CDMA Channel likely0x1b018001
NV 21Secondary CDMA Channel likely0xb3020903
NV 240xffff
NV 320xe7ebf900e7ebf900
NV 330xe703e703
NV 370x0000
NV 390xffffffff
NV 400x00
NV 420x00
NV 690x01
NV 710x5a524636353030202020202000
NV 760x01
NV 770x64
NV 820x30303030
NV 840x00
NV 850x303030303030
NV 176IMSI MCC likely0xe703
NV 177IMSI 11 12 likely0x63
NV 179Voice Privacy likely0x01
NV 2090xff
NV 2310x0000000000000000000000000000000000000000000000000000000000000000…
NV 240QNC Enabled Flag likely0x01
NV 241Data Service Option Set likely0x02
NV 2560x01
NV 259Home SID/NID List likely0x000000ffff0000ffff0000ffff0000ffff0000ffff0000ffff0000ffff0000ff…
NV 2620x00000000e7ebf900
NV 2630x0000e703
NV 2640xe703
NV 2650x63
NV 2660xff
NV 2910x00
NV 297Data MDR Mode likely0x03
NV 3740x00
NV 3750x00
NV 429Data SCRM Enabled likely0x01
NV 441Band Class Preference likely0xffff
NV 442Roaming Preference likely0xff00
NV 459Data Services QC Mobile IP likely0x00
NV 4640x00
NV 714Data Services Mobile IP Enable Profile likely0x000000000000
NV 8300x02020102020200000200000000000000000000000000000001
NV 8480x0000
NV 8490x0000
NV 850Service domain preference likelyCS + PS 0x0200
NV 946Band preference bits 16-31
Expand Band Preference 16 To 32 Bits
GSM 450, GSM 480, GSM 750, GSM 850, GSM railways 900, GSM PCS 1900, WCDMA B1 2100, WCDMA B2 1900, WCDMA B3 1800, WCDMA B4 1700, WCDMA B5 850, WCDMA B6 800, bit 12, bit 13, bit 15 0xffbf
NV 10150x0000
NV 10160x00
NV 10170x00
NV 10180x916c
NV 12060xb80be80314030205b80be803e80314030300e803e80314030300
NV 1896IPv6 enabled
Ipv6 Enabled
Off 0x00
NV 1907Authentication Require Password Encryption likely0x00
NV 28200x88130000
NV 28210x204e0000
NV 2954Bits 32 To 63 Of Band Pref likelybit 0, bit 1, bit 2, bit 3, bit 4, bit 5, bit 6, bit 7, bit 8, bit 9, bit 10, bit 11, bit 12, bit 13, bit 14, bit 15, WCDMA B7 2600, WCDMA B8 900, WCDMA B9 1700, bit 19, bit 20, bit 21, bit 22, bit 23, bit 24, bit 25, bit 26, bit 27, WCDMA B19 850, WCDMA B11 1500, bit 30, bit 31 0xffffffff
NV 35340x00
Package details and members (16)
Chip ID0x000E50E1
SBL0xAA00FE50
Restore SBL0xAA10FE50
acdb.mbn128.0 KiB
aop.mbn146.8 KiB
apdp.mbn13.2 KiB
apps.mbn2.29 MiB
bbcfg.mbn38.49 MiB
devcfg.mbn37.3 KiB
hyp.mbn78.4 KiB
qdsp6sw.mbn72.94 MiB
restoresbl1.mbn493.1 KiB
sbl1.mbn501.1 KiB
Info.plist1.1 KiB
sec.elf12.1 KiB
tz.mbn872.0 KiB
multi_image.mbn12.4 KiB
multi_image_qti.mbn12.3 KiB
Options.plist0 B
Diff: Mav20 in another image
789 carriers, 225 countries · iOS 27.0.1 (24A446) · beta iOS 27.2 beta 2 (24B5089g) GitHub Ready