ChinaTelecom_USIM_cn modem settings

carrier-explode iOS carrier and country bundles

iPhone Apple Watch

ChinaTelecom_USIM_cn

Phone

No modem file for iPhone 18 Pro Max (US): they run the modem's defaults.

overrides_D63_D64_D16_D17.der.pri Modem package.

Header

PRI Revision

6.0.161

Baseband overrides (44)

Setting	Value
Carrier policylikely PolicyMan rules keyed on MCC/PLMN: RAT capability, RF bands, UE mode /policyman/carrier_policy.xml
3GPP data dynamic configlikely Per-PLMN data rules, domestic/international roaming PLMN lists /data/3gpp/data_3gpp_dynamic_config.xml
dsds_timersunverified LTE setting: LTE RRC / L1 / L2 /nv/item_files/modem/lte/rrc/efs/dsds_timers
hplmn_rat_order_ctrlunverified NAS setting: NAS mobility management / PLMN selection /nv/item_files/modem/nas/hplmn_rat_order_ctrl	2
mav_interlace_scan_init_timerunverified Apple modem option: Apple-only (Maverick) modem option; undocumented /nv/item_files/modem/nas/mav_interlace_scan_init_timer	2
HPLMN RAT orderlikely Home-PLMN RAT search order: uint16 count, then sys_sys_mode RATs /nv/item_files/modem/nas/hplmn_rat_order	NR > LTE > WCDMA > GSM
t3411_value_during_mmtel_callunverified NAS setting: NAS mobility management / PLMN selection /nv/item_files/modem/nas/t3411_value_during_mmtel_call	2
UE usage settinglikely TS 24.301 UE usage setting /nv/item_files/modem/mmode/ue_usage_setting	0= Voice centric
IMS enable Enables the IMS task (VoLTE, VoWiFi, SMS over IMS) /nv/item_files/ims/IMS_enable	2
SMS domain preference listunverified Per-RAT/PLMN SMS domain list; layout not public /nv/item_files/modem/mmode/sms_domain_pref_list
Block SMS-PP envelopelikely Block SIM Toolkit SMS-PP (data download) envelopes, per subscription /nv/item_files/modem/qmi/cat/qmi_cat_block_sms_pp_env_per_sub	0= Off
x2l_irat_2tx_antunverified LTE setting: LTE RRC / L1 / L2 /nv/item_files/modem/lte/ML1/x2l_irat_2tx_ant	1
LTE band priority listlikely Prioritised band list for LFS/FFS scans (uint16 array) /nv/item_files/modem/lte/rrc/efs/band_priority_list_v2	22518212885872670x0300010005000800
LTE feature disablelikely LTE RRC capability feature-disable bitmap /nv/item_files/modem/lte/rrc/efs/lte_feature_disable
LTE disable durationlikely How long LTE stays disabled when CS services are unavailable /nv/item_files/modem/mmode/lte_disable_duration	60
EMM NAS itemslikely 32-byte EMM configuration blob /nv/item_files/modem/nas/emm_nas_nv_items
mt_detach_abnormal_handlingunverified NAS setting: NAS mobility management / PLMN selection /nv/item_files/modem/nas/mt_detach_abnormal_handling	1
Fake eNodeB mitigationlikely LTE false-base-station (fake eNodeB) mitigation /nv/item_files/modem/lte/rrc/bbq/bbq_mitigation	1= On
num_enb_tx_antunverified LTE setting: LTE RRC / L1 / L2 /nv/item_files/modem/lte/ML1/num_enb_tx_ant	2
disable_fr1_for_lpmunverified Apple modem option: Apple-only (Maverick) modem option; undocumented /nv/item_files/modem/mav/disable_fr1_for_lpm	1
disable_sa_icon_based_on_idle_l2nr_measlikely 5G icon rule: Status-bar 5G / 5G UW / 5G UC / 5G+ icon override logic /nv/item_files/modem/mav/disable_sa_icon_based_on_idle_l2nr_meas	1
disable_sa_icon_based_on_l2nr_mrlikely 5G icon rule: Status-bar 5G / 5G UW / 5G UC / 5G+ icon override logic /nv/item_files/modem/mav/disable_sa_icon_based_on_l2nr_mr	1
Disable SA on null SUCIlikely Turn off 5G SA when the SUCI uses the null protection scheme (SUPI sent unconcealed) /nv/item_files/modem/mav/mav_disable_sa_if_null_suci	0= Off
BWP switch on screen locklikely Move to a narrower NR bandwidth part while the screen is locked /nv/item_files/modem/mav/enable_bwp_switching_screen_lock	1= On
Dynamic SAlikely Turn 5G SA capability on and off with coverage (dyn_sa_* / dyn_cap_* timers and thresholds) /nv/item_files/modem/mav/enable_dyn_sa	0= Off
Dynamic VoNRlikely Turn VoNR on and off dynamically, alongside dynamic SA /nv/item_files/modem/mav/enable_dyn_vonr	0= Off
cap_srs_tx_switch_controllikely NR UE capability: NR RRC UE-capability toggle /nv/item_files/modem/nr5g/RRC/cap_srs_tx_switch_control	3
fr2_priority_optimizationunverified LTE setting: LTE RRC / L1 / L2 /nv/item_files/modem/lte/ML1/fr2_priority_optimization
mav_sa_lte_prio_sub_band_per_plmnlikely Band priority per PLMN: Per-PLMN band / sub-band (ARFCN range) scan priority /nv/item_files/modem/nas/mav_sa_lte_prio_sub_band_per_plmn
Reject NR null cipheringlikely Reject a 5G NAS Security Mode Command that selects null ciphering (NEA0) /nv/item_files/modem/nas/mav_nr_reject_smc_null_ciphering	0= Off
nrsa_whitelist_ca_comboslikely CA combo list: LTE CA / EN-DC band-combination allow/deny list /nv/item_files/modem/nr5g/rrc/nrsa_whitelist_ca_combos
EN-DC combos per PLMNlikely Same per-PLMN capability pruning for EN-DC combos (next to cap_prune, skip_cap_prune) /nv/item_files/modem/mav/endc_ca_file_generation	1= On
LTE CA combos per PLMNlikely Prune the advertised LTE CA combos per PLMN from /policyman/band_combos_per_plmn.xml /nv/item_files/modem/mav/lte_ca_xml_generation	1= On
mav_lte_steady_camp_durationunverified Apple modem option: Apple-only (Maverick) modem option; undocumented /nv/item_files/modem/nas/mav_lte_steady_camp_duration	180
mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdbunverified Apple modem option: Apple-only (Maverick) modem option; undocumented /nv/item_files/modem/nas/mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdb	4
NR band capabilitylikely NR band feature-capability list; proprietary layout /nv/item_files/modem/nr5g/RRC/cap_feature_band_nr	0
cap_control_mrdc_t_plus_t_band_comboslikely NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability /nv/item_files/modem/nr5g/RRC/cap_control_mrdc_t_plus_t_band_combos	0
Predefined NR ARFCNslikely NR channels to try first per PLMN: uint16 count, then {MCC, MNC, NR-ARFCN, band, flag} records /nv/item_files/modem/nas/mav_nr_predef_narfcn
mav_nr_prio_sub_band_per_plmnlikely Band priority per PLMN: Per-PLMN band / sub-band (ARFCN range) scan priority /nv/item_files/modem/nas/mav_nr_prio_sub_band_per_plmn
NR TDD+FDD combo controllikely Enables NR-CA/NR-DC TDD+FDD band-combo classes /nv/item_files/modem/nr5g/RRC/cap_control_t_plus_f_band_combos	7
is_x_to_nr_enabledunverified NAS setting: NAS mobility management / PLMN selection /nv/item_files/modem/nas/is_x_to_nr_enabled	65793
NR5G disable modeunverified Disables NR5G SA and/or NSA /nv/item_files/modem/mmode/nr5g_disable_mode	0= NR5G enabled
pri_fplmnlikely PLMN list: Packed BCD MCC/MNC list (TS 31.102) /nv/item_files/modem/nas/pri_fplmn
iPLMNlikely PLMN list: Packed BCD MCC/MNC list (TS 31.102) /nv/item_files/modem/nas/iPLMN

Setting

Value

Carrier policylikely

PolicyMan rules keyed on MCC/PLMN: RAT capability, RF bands, UE mode

/policyman/carrier_policy.xml

3GPP data dynamic configlikely

Per-PLMN data rules, domestic/international roaming PLMN lists

/data/3gpp/data_3gpp_dynamic_config.xml

dsds_timersunverified

LTE setting: LTE RRC / L1 / L2

/nv/item_files/modem/lte/rrc/efs/dsds_timers

hplmn_rat_order_ctrlunverified

NAS setting: NAS mobility management / PLMN selection

/nv/item_files/modem/nas/hplmn_rat_order_ctrl

mav_interlace_scan_init_timerunverified

Apple modem option: Apple-only (Maverick) modem option; undocumented

/nv/item_files/modem/nas/mav_interlace_scan_init_timer

HPLMN RAT orderlikely

Home-PLMN RAT search order: uint16 count, then sys_sys_mode RATs

/nv/item_files/modem/nas/hplmn_rat_order

NR > LTE > WCDMA > GSM

t3411_value_during_mmtel_callunverified

NAS setting: NAS mobility management / PLMN selection

/nv/item_files/modem/nas/t3411_value_during_mmtel_call

UE usage settinglikely

TS 24.301 UE usage setting

/nv/item_files/modem/mmode/ue_usage_setting

0= Voice centric

IMS enable

Enables the IMS task (VoLTE, VoWiFi, SMS over IMS)

/nv/item_files/ims/IMS_enable

SMS domain preference listunverified

Per-RAT/PLMN SMS domain list; layout not public

/nv/item_files/modem/mmode/sms_domain_pref_list

Block SMS-PP envelopelikely

Block SIM Toolkit SMS-PP (data download) envelopes, per subscription

/nv/item_files/modem/qmi/cat/qmi_cat_block_sms_pp_env_per_sub

0= Off

x2l_irat_2tx_antunverified

LTE setting: LTE RRC / L1 / L2

/nv/item_files/modem/lte/ML1/x2l_irat_2tx_ant

LTE band priority listlikely

Prioritised band list for LFS/FFS scans (uint16 array)

/nv/item_files/modem/lte/rrc/efs/band_priority_list_v2

22518212885872670x0300010005000800

LTE feature disablelikely

LTE RRC capability feature-disable bitmap

/nv/item_files/modem/lte/rrc/efs/lte_feature_disable

LTE disable durationlikely

How long LTE stays disabled when CS services are unavailable

/nv/item_files/modem/mmode/lte_disable_duration

EMM NAS itemslikely

32-byte EMM configuration blob

/nv/item_files/modem/nas/emm_nas_nv_items

mt_detach_abnormal_handlingunverified

NAS setting: NAS mobility management / PLMN selection

/nv/item_files/modem/nas/mt_detach_abnormal_handling

Fake eNodeB mitigationlikely

LTE false-base-station (fake eNodeB) mitigation

/nv/item_files/modem/lte/rrc/bbq/bbq_mitigation

1= On

num_enb_tx_antunverified

LTE setting: LTE RRC / L1 / L2

/nv/item_files/modem/lte/ML1/num_enb_tx_ant

disable_fr1_for_lpmunverified

Apple modem option: Apple-only (Maverick) modem option; undocumented

/nv/item_files/modem/mav/disable_fr1_for_lpm

disable_sa_icon_based_on_idle_l2nr_measlikely

5G icon rule: Status-bar 5G / 5G UW / 5G UC / 5G+ icon override logic

/nv/item_files/modem/mav/disable_sa_icon_based_on_idle_l2nr_meas

disable_sa_icon_based_on_l2nr_mrlikely

5G icon rule: Status-bar 5G / 5G UW / 5G UC / 5G+ icon override logic

/nv/item_files/modem/mav/disable_sa_icon_based_on_l2nr_mr

Disable SA on null SUCIlikely

Turn off 5G SA when the SUCI uses the null protection scheme (SUPI sent unconcealed)

/nv/item_files/modem/mav/mav_disable_sa_if_null_suci

0= Off

BWP switch on screen locklikely

Move to a narrower NR bandwidth part while the screen is locked

/nv/item_files/modem/mav/enable_bwp_switching_screen_lock

1= On

Dynamic SAlikely

Turn 5G SA capability on and off with coverage (dyn_sa_* / dyn_cap_* timers and thresholds)

/nv/item_files/modem/mav/enable_dyn_sa

0= Off

Dynamic VoNRlikely

Turn VoNR on and off dynamically, alongside dynamic SA

/nv/item_files/modem/mav/enable_dyn_vonr

0= Off

cap_srs_tx_switch_controllikely

NR UE capability: NR RRC UE-capability toggle

/nv/item_files/modem/nr5g/RRC/cap_srs_tx_switch_control

fr2_priority_optimizationunverified

LTE setting: LTE RRC / L1 / L2

/nv/item_files/modem/lte/ML1/fr2_priority_optimization

mav_sa_lte_prio_sub_band_per_plmnlikely

Band priority per PLMN: Per-PLMN band / sub-band (ARFCN range) scan priority

/nv/item_files/modem/nas/mav_sa_lte_prio_sub_band_per_plmn

Reject NR null cipheringlikely

Reject a 5G NAS Security Mode Command that selects null ciphering (NEA0)

/nv/item_files/modem/nas/mav_nr_reject_smc_null_ciphering

0= Off

nrsa_whitelist_ca_comboslikely

CA combo list: LTE CA / EN-DC band-combination allow/deny list

/nv/item_files/modem/nr5g/rrc/nrsa_whitelist_ca_combos

EN-DC combos per PLMNlikely

Same per-PLMN capability pruning for EN-DC combos (next to cap_prune, skip_cap_prune)

/nv/item_files/modem/mav/endc_ca_file_generation

1= On

LTE CA combos per PLMNlikely

Prune the advertised LTE CA combos per PLMN from /policyman/band_combos_per_plmn.xml

/nv/item_files/modem/mav/lte_ca_xml_generation

1= On

mav_lte_steady_camp_durationunverified

Apple modem option: Apple-only (Maverick) modem option; undocumented

/nv/item_files/modem/nas/mav_lte_steady_camp_duration

180

mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdbunverified

Apple modem option: Apple-only (Maverick) modem option; undocumented

/nv/item_files/modem/nas/mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdb

NR band capabilitylikely

NR band feature-capability list; proprietary layout

/nv/item_files/modem/nr5g/RRC/cap_feature_band_nr

cap_control_mrdc_t_plus_t_band_comboslikely

NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability

/nv/item_files/modem/nr5g/RRC/cap_control_mrdc_t_plus_t_band_combos

Predefined NR ARFCNslikely

NR channels to try first per PLMN: uint16 count, then {MCC, MNC, NR-ARFCN, band, flag} records

/nv/item_files/modem/nas/mav_nr_predef_narfcn

mav_nr_prio_sub_band_per_plmnlikely

Band priority per PLMN: Per-PLMN band / sub-band (ARFCN range) scan priority

/nv/item_files/modem/nas/mav_nr_prio_sub_band_per_plmn

NR TDD+FDD combo controllikely

Enables NR-CA/NR-DC TDD+FDD band-combo classes

/nv/item_files/modem/nr5g/RRC/cap_control_t_plus_f_band_combos

is_x_to_nr_enabledunverified

NAS setting: NAS mobility management / PLMN selection

/nv/item_files/modem/nas/is_x_to_nr_enabled

65793

NR5G disable modeunverified

Disables NR5G SA and/or NSA

/nv/item_files/modem/mmode/nr5g_disable_mode

0= NR5G enabled

pri_fplmnlikely

PLMN list: Packed BCD MCC/MNC list (TS 31.102)

/nv/item_files/modem/nas/pri_fplmn

iPLMNlikely

PLMN list: Packed BCD MCC/MNC list (TS 31.102)

/nv/item_files/modem/nas/iPLMN

Legacy NV values (8)

NV	Item	Value
442	Roaming Preferencelikely	255
553	GSM A5 Algorithms Supportedlikely	5
4432	GPRS GEA Algorithms Supportedlikely	7
401	GPSOne PDE TCP Addresslikely	0
426	GPSOne PDE Portlikely	0
62005	PRI revision Packed PRI Revision header	10551302= 6.0.1610x0600a100
4118	HSDPA Categorylikely 3GPP HSDPA UE category	24
4210	WCDMA HSUPA Categorylikely 3GPP HSUPA UE category	6

Carrier Configuration Management feature groups

25 one-byte flags per group. No source names them; under each set flag is which carriers set it, and what the modem does with it where its code shows. The EVDO, UIM and OMA groups are obsolete in the iPhone 17 modem.

Group	Flags
Call Manager Feature Group NV 62012, 1 of 25 set	0123456789101112131415161718192021222324 14: Set for iPhone 12 and 13; a file sets this or flag 20, rarely both

Group

Flags

Call Manager Feature Group

NV 62012, 1 of 25 set

0123456789101112131415161718192021222324

14: Set for iPhone 12 and 13; a file sets this or flag 20, rarely both

Legacy NV item list (90)

Green ones have a value above.

259Home SID/NID List176IMSI MCC177IMSI 11 1220Primary CDMA Channel21Secondary CDMA Channel5Slot Cycle Index179Voice Privacy285EVRC Voice Service Options34CDMA Mobile Terminated Home SID Registration Flag35CDMA Mobile Terminated Foreign SID Registration Flag36CDMA Mobile Terminated Foreign NID Registration Flag296OTASP SPC Change304OTKSL Flag261SPASM Protection Per NAM260OTAPA Enabled3533SMS MO Retry Interval240QNC Enabled Flag459Data Services QC Mobile IP460Data Services Mobile IP Registration Retries461Data Services Mobile IP Registration Retries Initial Interval462Data Services Mobile IP Registration Expiration Attempt Reregistration463Data Services Mobile IP Number Profiles546Data Services Mobile IP RFC2002bis MN Home Agent Authenticator Calculation495Data Services Mobile IP Qualcomm PREV 6 MIP Handoff Optimization Enabled854Data Services Mobile IP DMU PKO ID889Data Services Mobile IP DMU MN Authentication906IP PPP Password579xEV(HDR) Access Network CHAP Authentication NAI1192HDR Access Network Stream CHAP Authentication Password298Packet Data Calls Originate String429Data SCRM Enabled450Data Throttle Enabled300Packet Data Configuration241Data Service Option Set401GPSOne PDE TCP Address426GPSOne PDE Port423Primary DNS Server424Secondary DNS Server714Data Services Mobile IP Enable Profile4101Roam Indicator Custom Home4960HS Based Plus Dial Setting4959User SID To MCC Assoc Table3635SD Configurable Items62002NV 62002466Data Services Mobile IP Shared Secret User Profile4102CDMA SO68 Enabled3446TRM Configuration4396DS Mobile IP Deregistration Retries553GSM A5 Algorithms Supported4432GPRS GEA Algorithms Supported4118HSDPA Category4210WCDMA HSUPA Category62009CDMA 1X Feature Group62011System Determination Feature Group62012Call Manager Feature Group62013Wireless Messaging Feature Group62014Data Service Feature Group62003442Roaming Preference58021NV 580211920AAGPS Positioning Modes Supported4265VOIP Registration Mode4229SMS MP On Traffic Channel6248eHRPD Enabled4528HDR EMPA Supported6862eHRPD Authentication Mode4964HDR SCP Force AT Configuration475HDR SCP Session Status7166CDMA SO73 Enabled6Mobile CAI Revision Number6850UMTS AMR Codec Preference Config1907Authentication Require Password Encryption62026NV 620265895MGRF Supported6247PPP VSNCP Config Data852APN Name5280Disable CM Call Type946Band preference bits 16-312954Bits 32 To 63 Of Band Pref6832HDRSCP Force Restricted CF3461ENS Enabled62025Delay RAU during CSFB (probable)62023NV 620234703CGPS UMTS PDE Server Address URL6792GNSS SUPL Version3758AAGPS Use Transport Security909GSM/UMTS SMS Bearer Preference62005PRI revision62035Feature Group (unnamed, tag 9f83e453)855RTRE Configuration

NV path schema index (265 paths, raw)

/nv/item_files/modem/nas/lte_nas_temp_fplmn_backoff_time
/nv/item_files/ims/IMS_enable
/nv/item_files/modem/mmode/ue_usage_setting
/nv/item_files/cdma/1xcp/1xadvanced_capability
/nv/item_files/cdma/1xcp/so73_cop0_supported
/nv/item_files/modem/mmode/voice_domain_pref
/nv/item_files/modem/mmode/lte_disable_duration
/nv/item_files/modem/hdr/cp/ovhd/d2lresel
/nv/item_files/data/3gpp2/ehrpd_partial_context
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r8
/nv/item_files/modem/data/epc/qmi_qos
/nv/item_files/wcdma/rrc/wcdma_rrc_fast_return_to_lte_after_csfb
/nv/item_files/modem/mmode/lte_bandpref
/nv/item_files/modem/mmode/sms_mandatory
/nv/item_files/modem/data/3gpp/umts_nw_initiated_qos_support
/nv/item_files/modem/nas/nas_lai_change_force_lau_for_emergency
/nv/item_files/data/3gpp2/mpit_enable
/nv/item_files/data/3gpp2/max_fb_pdn_failure_count
/nv/item_files/modem/data/3gpp/ps/3gpp_rel_version
/nv/item_files/modem/data/3gpp/ps/ser_req_throttle_behavior
/nv/item_files/modem/nas/hplmn_rat_order
/nv/item_files/modem/mmode/sms_only
/nv/item_files/modem/geran/grr/g2l_blind_redir_after_csfb_control
/nv/item_files/modem/mmode/sms_domain_pref
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r9
/nv/item_files/wcdma/rrc/wcdma_ppac_support
/nv/item_files/wcdma/rrc/wcdma_rrc_feature
/nv/item_files/data/3gpp2/ehrpd_to_hrpd_fallback
/nv/item_files/data/3gpp2/epc_data_context_duration
/nv/item_files/wcdma/rrc/wcdma_rrc_wtol_ps_ho_support
/nv/item_files/modem/data/3gpp/ps/allow_infinite_throt
/nv/item_files/modem/nas/cm_efs_mav_health_monitor_control_pri
/nv/item_files/modem/nas/nas_srvcc_support
/nv/item_files/data/3gpp2/tethered_nai_prefix
/nv/item_files/modem/sms/pri_disable_cb_dup_detection
/nv/item_files/modem/lte/ML1/cdrx_opt_info
/nv/item_files/modem/nas/ignore_uplmn
/nv/item_files/wcdma/rrc/wcdma_rrc_csfb_skip_sib11_opt
/nv/item_files/modem/nas/csg_support_configuration
/nv/item_files/modem/nas/iPLMN
/nv/item_files/modem/nas/max_validate_sim_counter
/nv/item_files/modem/nas/irat_search_timer
/nv/item_files/modem/mmode/sms_domain_pref_list
/nv/item_files/modem/mmode/qmi/mav_pri_allow_auto_answer
/ds/atcop/atcop_cops_auto_mode.txt
/nv/item_files/modem/uim/mmgsdi/refresh_retry
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r10
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r8_tdd
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r9_tdd
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r10_tdd
/nv/item_files/modem/lte_connection_control
/nv/item_files/modem/lte/rrc/cap/prune_ca_combos
/nv/item_files/modem/lte/rrc/efs/lte_conn_ctrl_barring_optimz_params
/nv/item_files/modem/data/3gpp/call_orig_allowed_before_ps_attach
/nv/item_files/wcdma/rrc/wcdma_rrc_wtol_tdd_ps_ho_support
/nv/item_files/modem/sms/mmgsdi_refresh_vote_ok
/nv/item_files/modem/uim/gstk/default_apn
/nv/item_files/modem/mmode/buffer_ims_pref_change_timer
/nv/item_files/data/3gpp/rpm_params
/nv/item_files/data/3gpp/rpm_suppported_sim
/nv/item_files/modem/geran/grr/g2l_blind_redir_after_srvcc_control
/eHRPD/initial_sequence_number.txt
/nv/item_files/modem/data/epc/pdn_throttling_config.txt
/policyman/carrier_policy.xml
/mav/mav_police_pri_mode_pref_mask
/nv/item_files/modem/uim/mmgsdi/ens_slot_enabled
/nv/item_files/modem/nas/pri_fplmn
/nv/item_files/modem/nas/lte_nas_ignore_mt_csfb_during_volte_call
/nv/item_files/modem/data/3gpp/ps/rel_10_throttling
/nv/item_files/modem/lte/L2/mac/lte_mac_enable_aas
/nv/item_files/modem/nas/mav_rat_upgrade_from_pri
/data/ds_dsd_apm_rules.txt
/nv/item_files/modem/data/3gpp/ps/rel_10_throttling_per_plmn
/nv/item_files/modem/nas/mav_hpplmn_scan_throttler/config_params
/nv/item_files/modem/data/3gpp/lteps/allow_def_lte_pdn_teardown
/nv/item_files/modem/nas/eplmn_cell_reselect
/nv/item_files/modem/nas/hplmn_rat_order_ctrl
/data/3gpp/throttling/srv_req_throt_config.txt
/nv/item_files/wcdma/rrc/rrc_fe_fach_support
/nv/item_files/modem/nas/nas_config_feature
/nv/item_files/modem/lte/rrc/efs/ho_neigh_cell_si_acq_params
/nv/item_files/modem/lte/rrc/efs/lte_spec_feature_r11
/nv/item_files/modem/lte/rrc/efs/lte_spec_feature_r11_tdd
/nv/item_files/modem/qmi/mav_fws_gsm_key_signature_bitmask
/nv/item_files/modem/mmode/lte_rpm_info_2
/nv/item_files/modem/nas/dos_mitigation_feature_config
/nv/item_files/modem/lte/rrc/efs/lte_feature_enable
/nv/item_files/modem/lte/rrc/efs/lte_feature_disable
/nv/item_files/modem/mmode/mode_pref
/nv/item_files/modem/lte/rrc/efs/lte_rrc_sub_feature_enable
/nv/item_files/modem/lte/rrc/efs/lte_rrc_sub_feature_disable
/nv/item_files/modem/lte/rrc/efs/cell_depriority_params
/nv/item_files/modem/lte/rrc/efs/conn_rej_cell_depriority_params
/nv/item_files/modem/lte/rrc/efs/c2k_rx_config
/nv/item_files/modem/mmode/follow_tot
/nv/item_files/modem/nr5g/RRC/cep_conn_est_fail_ctrl
/nv/item_files/modem/mmode/nr5g_disable_mode
/nv/item_files/modem/uim/mmgsdi/slot_features_status_list__mav_override
/nv/item_files/modem/uim/mmgsdi/override_opl_pnn_lookup_for_non_rplmn
/nv/item_files/modem/uim/uimdrv/nv_pdown_uim_consecutive_techproblems
/nv/item_files/modem/qmi/cat/qmi_cat_block_sms_pp_env_per_sub
/nv/item_files/modem/lte/rrc/cap/max_ca_combos
/nv/item_files/modem/mmode/nr_band_pref
/nv/item_files/modem/lte/rrc/mav_rrc_reject_supported
/nv/item_files/modem/nr5g/RRC/cap_add_bw
/nv/item_files/ims/media_service_config
/nv/item_files/modem/nas/mav_sa_lte_prio_sub_band_per_plmn
/nv/item_files/modem/nas/mav_nr_prio_sub_band_per_plmn
/nv/item_files/modem/nas/mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdb
/nv/item_files/modem/nas/mav_lte_steady_camp_duration
/nv/item_files/modem/nas/mav_interlace_scan_init_timer
/nv/item_files/modem/uim/gstk/feature_bmask__mav_override
/nv/item_files/modem/mmode/nr_nsa_band_pref
/nv/item_files/modem/lte/rrc/efs/csg_control_v2
/nv/item_files/modem/mav/disable_sdm
/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_val
/nv/item_files/modem/lte/rrc/efs/disable_4l_per_band
/nv/item_files/modem/mav/lte_ca_xml_generation
/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos
/nv/item_files/modem/lte/rrc/cap/blacklist_explicit_ca_combos
/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_ulca
/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_laa
/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos_with_nc_combos
/nv/item_files/modem/mav/endc_ca_file_generation
/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos_with_ulca
/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos_with_laa
/nv/item_files/modem/nr5g/rrc/endc_blacklist_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_blacklist_explicit_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_lte_fr1_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_fr1_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_lte_fr2_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_fr2_ca_combos
/nv/item_files/modem/nas/tdscdma_op_plmn_list
/nv/item_files/modem/lte/rrc/cap/max_lte_cap_size
/nv/item_files/modem/nr5g/RRC/cap_disable_ul_256qam
/nv/item_files/modem/nas/mav_nr_predef_narfcn
/nv/item_files/modem/nas/isr
/nv/item_files/modem/mmode/ssac_hvolte
/nv/item_files/modem/lte/rrc/efs/dsds_timers
/nv/item_files/modem/uim/uimdrv/mav_uim_wakeup_poll_timer_config
/nv/item_files/modem/lte/rrc/efs/band_priority_list_v2
/nv/item_files/modem/data/3gpp/ps/apn_reject/apn_reject_name.txt
/nv/item_files/modem/nr5g/rrc/endc_disable_specific_ul_bands
/nv/item_files/modem/lte/rrc/PC2_WHITELIST.xml
/nv/item_files/modem/lte/rrc/bbq/bbq_mitigation
/nv/item_files/modem/mmode/ims_reg_status_wait_timer
/nv/item_files/modem/lte/rrc/efs/lte_connection_ctrl_params
/nv/item_files/modem/mmode/scan_scope_rule
/nv/item_files/modem/data/dsmgr/pdu_session_id_inclusion
/nv/reg_files/modem/lte/rrc/csp/pref_freq_list
/nv/item_files/modem/mav/local_crp_hysteresis_tmr_val
/nv/item_files/modem/uim/gstk/mav_svc_notification_to_card_upon_restricted_mode_exit_latency_config
/nv/item_files/modem/nas/is_eps_rplmn_from_sim_needed
/nv/item_files/modem/nr5g/RRC/cre_thermal_ota_cause
/nv/item_files/modem/lte/rrc/efs/data_inactivity_control
/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_volte_val
/nv/item_files/modem/lte/ML1/fr2_priority_optimization
/nv/item_files/modem/mav/volte_screen_on_hysteresis_tmr_val
/nv/item_files/modem/nas/skip_acb_check_drb_est_ims_registration
/nv/item_files/modem/mav/mav_monitor_enable_nr5g_uwb_based_on_motion_state_no_uli_case
/nv/item_files/modem/nas/is_x_to_nr_enabled
/nv/item_files/modem/nr5g/RRC/meas_pruning
/nv/item_files/modem/mav/disable_mmw_for_ftv
/nv/item_files/modem/mav/disable_fr1_for_lpm
/nv/item_files/modem/data/3gpp/ps/set_volte_call_type
/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_max_reg_failure
/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_voice_not_avail_based_on_motion_st
/nv/item_files/modem/mav/mav_monitor_enable_nr5g_uwb_based_on_motion_state
/nv/item_files/modem/nas/mav_pssi_reg_follow_rplmn_rat_order_power_up
/nv/item_files/modem/nr5g/RRC/cap_per_plmn_limit_bw
/policyman/5g_roaming_feature_enabled.xml
/nv/item_files/modem/nas/lte_fast_cfl_search_timer
/nv/item_files/modem/nr5g/rrc/endc_blacklist_fr1_fdd_tdd_ca_combos
/nv/item_files/modem/nr5g/RRC/cap_srs_tx_switch_control
/data/3gpp/data_3gpp_dynamic_config.xml
/nv/item_files/modem/nr5g/RRC/cap_csi_rs_32_port_control
/nv/item_files/modem/lte/rrc/efs/hst_scan_params
/nv/item_files/modem/data/3gpp/reset_non_spec_throttle_with_reattach_required
/nv/item_files/modem/nas/mav_lte_reject_smc_null_ciphering
/nv/item_files/modem/nas/mav_nr_reject_smc_null_ciphering
/nv/item_files/modem/mmode/sd/mav_oos_search_rbs_n_dbs
/nv/item_files/modem/nr5g/rrc/nrsa_blacklist_ca_combos
/nv/item_files/modem/nr5g/rrc/nrsa_blacklist_explicit_ca_combos
/nv/item_files/modem/nr5g/rrc/nrsa_reduced_cc_fr1_ca_combos
/nv/item_files/modem/nr5g/rrc/nrsa_blacklist_fr1_fdd_tdd_ca_combos
/nv/item_files/modem/maverick/uim/apps/card_prov_strategy
/nv/item_files/modem/mav/sa_depri_bw_val
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_t_band_combos
/nv/item_files/modem/nr5g/RRC/cap_control_mrdc_f_plus_t_band_combos
/nv/item_files/modem/mav/mav_disable_sa_if_null_suci
/nv/item_files/modem/nr5g/RRC/cap_control_mrdc_t_plus_t_band_combos
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_t_plus_t_band_combos
/policyman/5g_sa_roaming_feature_enabled.xml
/nv/item_files/modem/mav/cap_prune_efs_version
/nv/item_files/modem/nr5g/RRC/cap_prune
/nv/item_files/modem/nas/t3411_value_during_mmtel_call
/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos
/nv/item_files/modem/mav/mav_avoid_uwb_roaming
/nv/item_files/modem/nr5g/rrc/endc_blacklist_ca_combos_with_nc_combos
/nv/item_files/modem/nas/ehplmn_nv
/nv/item_files/modem/nas/is_ehplmn_nv_set
/nv/item_files/modem/nas/emm_nas_nv_items
/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_ims_reg_failure_timer
/nv/item_files/modem/mmode/mav_volte_disable_ims_reg_wait_timer_hplmn
/nv/item_files/modem/nas/force_esr_ndds_for_lte_only
/nv/item_files/modem/nas/force_esr_ndds_cust
/nv/item_files/modem/mmode/sd/e911_prioritize_cs
/policyman/l2nr_policy.xml
/nv/item_files/modem/uim/uimdrv/uim_check_sim_status_apm_off
/nv/item_files/modem/data/3gpp/ps/l2nr_fast_return_params
/nv/item_files/data/3gpp/ds_3gpp_mtu
/nv/item_files/modem/nr5g/RRC/cap_feature_band_nr
/nv/item_files/modem/nr5g/RRC/cap_feature_pdcp
/nv/item_files/wcdma/rrc/rrc_req_lte_for_truncated_ca
/nv/item_files/modem/nr5g/rrc/nrsa_whitelist_ca_combos
/nv/item_files/modem/mav/mav_monitor_replace_nr5g_uc_with_nr_basic
/nv/item_files/modem/mav/mav_monitor_mm_mb_replace_nr5g_with_nr5guwb
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_f_band_combos
/nv/item_files/modem/nr5g/RRC/cap_control_t_plus_f_band_combos
/nv/item_files/modem/mmode/nr5g_emc_support
/nv/item_files/modem/nas/mt_detach_abnormal_handling
/nv/item_files/modem/mav/mav_avoid_pco_for_aging
/nv/item_files/modem/mav/mav_ignore_high_bw_check
/nv/item_files/modem/nr5g/rrc/endc_blacklist_specific_lte_bands
/nv/item_files/modem/nr5g/RRC/band_priority_list
/nv/item_files/modem/nr5g/RRC/cap_feature_phy
/nv/item_files/modem/nas/ehplmn_nv_new
/nv/item_files/modem/mav/sdm_nsa_icon_override
/nv/item_files/modem/mav/enable_bwp_switching_screen_lock
/nv/item_files/modem/nr5g/RRC/cap_trigger_rcu_empty_active_combo
/nv/item_files/modem/mav/cdm_feature_enable_status
/nv/item_files/modem/mmode/lte_bandpref_extn_65_256
/policyman/private_mcc_handling
/nv/item_files/modem/nas/nr_disable_duration
/nv/item_files/modem/nr5g/RRC/cap_srs_carrier_switch_per_plmn_control_v2
/nv/item_files/modem/nas/mm5g_eps_mobility_ra_cap_update
/nv/item_files/modem/mav/sa_depri_td_bwp_thresh_val
/nv/item_files/modem/mav/prune_fr1_fr2_due_to_volte_enable
/nv/item_files/modem/mav/uwb_nr_band_bw
/nv/item_files/modem/mav/enable_fr1_scell_vrlf
/nv/item_files/modem/mav/mav_sa_coverage_band_list
/nv/item_files/modem/mav/enable_fblte_based_bwp_config
/nv/item_files/modem/mav/enable_dyn_sa
/nv/item_files/modem/mav/enable_dyn_vonr
/nv/item_files/modem/lte/ML1/ard_config
/nv/item_files/modem/lte/ML1/traffic_forced_r1
/nv/item_files/modem/mav/bwp_switch_tmr_val
/nv/item_files/modem/mav/bwp_switch_tmr_val_sl
/nv/item_files/modem/mav/override_icon_based_on_sa_coverage
/nv/item_files/modem/mav/disable_sa_icon_based_on_l2nr_mr
/nv/item_files/modem/nr5g/RRC/cap_feature_mac
/nv/item_files/modem/mav/disable_sa_icon_based_on_idle_l2nr_meas
/nv/item_files/modem/mav/disable_sa_icon_based_on_restrict_dcnr
/nv/item_files/modem/lte/rrc/efs/eps_fallback_control
/nv/item_files/modem/lte/ML1/num_enb_tx_ant
/nv/item_files/modem/mmode/sd/mav_sd_emerg_call_allow_lmtd_srv
/nv/item_files/modem/mav/disable_sa_deprio_on_wifi_assist
/nv/item_files/modem/nas/mav_pssi_reg_gfnh_allowed_plmn_per_carrier
/nv/item_files/modem/uim/mmgsdi/invalidate_nitz
/nv/item_files/modem/lte/ML1/x2l_irat_2tx_ant
/nv/item_files/modem/mav/skip_lte_cap_prune
/nv/item_files/modem/nas/mav_pssi_reg_gfnh_allowed_frequencies_per_carrier
/nv/item_files/modem/nas/mav_gfnh_recprcl_roaming
/nv/item_files/modem/nas/mav_force_srvcc

Unidentified fields (1)

Tag	n	len	Value	Note
9fa710	1	22	b2002000210006010701d101090b8e03aa042500890b	small binary blob that precedes the NV item list

Tag

len

Value

Note

9fa710

b2002000210006010701d101090b8e03aa042500890b

small binary blob that precedes the NV item list

Modem defaults this file replaces

Files the package ships at the EFS paths this bundle's .der.pri writes.

EFS path	Package copy
/policyman/carrier_policy.xml	bbcfg.mbn P1P4P5P6P7P11P12P13	Compare
/data/3gpp/data_3gpp_dynamic_config.xml	bbcfg.mbn P1P4P5P6P7P11P12P13	Compare

EFS path

Package copy

/policyman/carrier_policy.xml

bbcfg.mbn P1P4P5P6P7P11P12P13

Compare

/data/3gpp/data_3gpp_dynamic_config.xml

bbcfg.mbn P1P4P5P6P7P11P12P13

Compare

789 carriers, 225 countries · iOS 27.0.1 (24A446) · beta iOS 27.2 beta 2 (24B5089g) GitHub Ready