carrier-explode iOS carrier and country bundles
TMobile_Boost_USUnitedStates country bundle
  1. iOS 27.2 beta 1–2 image · build 72.7
  2. iOS 27.0 – 27.0.1 image · build 72.0
  3. iOS 26.5 – 26.6.2 image · build 70.0
  4. iOS 26.4 – 26.4.2 image · build 69.0
  5. iOS 26.3 – 26.3.1 image · build 68.0
  6. iOS 26.2 – 26.2.1 image · build 67.0
  7. iOS 26.1 image · build 66.0
  8. iOS 26.0 – 26.0.1 image · build 65.0
  9. OTA · iOS 13.3+ · build 41.1
  10. OTA · iOS 12.4+ · build 36.1 · iPhone6,1
iOS 27.0 – 27.0.1 image · build 72.0 (10)
  1. iOS 27.2 beta 1–2 image · build 72.7
  2. iOS 27.0 – 27.0.1 image · build 72.0
  3. iOS 26.5 – 26.6.2 image · build 70.0
  4. iOS 26.4 – 26.4.2 image · build 69.0
  5. iOS 26.3 – 26.3.1 image · build 68.0
  6. iOS 26.2 – 26.2.1 image · build 67.0
  7. iOS 26.1 image · build 66.0
  8. iOS 26.0 – 26.0.1 image · build 65.0
  9. OTA · iOS 13.3+ · build 41.1
  10. OTA · iOS 12.4+ · build 36.1 · iPhone6,1
PhonesModemOverride file
iPhone 16, 16 Plus, 16 Pro, 16 Pro MaxQualcomm X75 · Mav24overrides_D93_D94_D47_D48.der.pri
iPhone 11, 11 Pro, 11 Pro MaxIntel · ICE19overrides_D421_D431_N104.der.pri from OTA build 41.1 (iOS 13.3+)
iPhone SE (2nd generation)Intel · ICE19overrides_D79.der.pri from OTA build 41.1 (iOS 13.3+)
iPhone 12, 12 mini, 12 Pro, 12 Pro Max, 13, 13 mini, 13 Pro, 13 Pro Max, 14, 14 Plus, 14 Pro, 14 Pro Max, 15, 15 Plus, 15 Pro, 15 Pro Max, SE (3rd generation)Qualcomm · Mav23, Qualcomm · Mav22, Qualcomm · Mav30, Qualcomm · Mav21, Qualcomm · Mav20None: package defaults
iPhone 16e, 17, 17 Pro, 17 Pro Max, 17e, Air, iPhone19,2, iPhone19,3, iPhone19,7Apple · c4020, Qualcomm X80 · Mav25, Apple C1Unknown: no copy of this bundle made for them
overrides_D93_D94_D47_D48.der.pri
Header
Written forQualcomm modem
PRI Revision1.2.163
Baseband overrides (52)
SettingValue
APM ruleslikely
Attach PDN Manager rules (which PDN is required for attach)
/data/ds_dsd_apm_rules.txt
"APN_String:boost.data; ATTACH_TYPE_RULES:TRUE; P-CSCFRequired:4; IPAddressRequired:5; DNSAddressRequired:4; P-CSCF_OR_DNSAddressRequired:4; ON_DEMAND_TYPE_RULES:TRUE; P-CSCFRequired:4; IPAddressRequired:5; DNSAddressRequired:4; P-CSCF_OR_DNSAddressRequired:4; "
Carrier policylikely
PolicyMan rules keyed on MCC/PLMN: RAT capability, RF bands, UE mode
/policyman/carrier_policy.xml
hplmn_rat_order_ctrlunverified
NAS setting: NAS mobility management / PLMN selection
/nv/item_files/modem/nas/hplmn_rat_order_ctrl
2
mav_pssi_reg_unblock_hplmn_max_reg_failurelikely
PSSI registration rule: Apple PLMN search / system-selection (PSSI) registration tuning
/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_max_reg_failure
1
mav_pssi_reg_unblock_hplmn_voice_not_avail_based_on_motion_stlikely
PSSI registration rule: Apple PLMN search / system-selection (PSSI) registration tuning
/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_voice_not_avail_based_on_motion_st
1
HPLMN RAT orderlikely
Home-PLMN RAT search order: uint16 count, then sys_sys_mode RATs
/nv/item_files/modem/nas/hplmn_rat_order
NR > LTE > WCDMA > GSM
IMS enable
Enables the IMS task (VoLTE, VoWiFi, SMS over IMS)
/nv/item_files/ims/IMS_enable
2
IMS media service configunverified
IMS media (codec/RTP) service config; no public schema
/nv/item_files/ims/media_service_config
SMS domain preference listunverified
Per-RAT/PLMN SMS domain list; layout not public
/nv/item_files/modem/mmode/sms_domain_pref_list
Block SMS-PP envelopelikely
Block SIM Toolkit SMS-PP (data download) envelopes, per subscription
/nv/item_files/modem/qmi/cat/qmi_cat_block_sms_pp_env_per_sub
0 = Off
SMS domain preference
SMS over IMS preference
/nv/item_files/modem/mmode/sms_domain_pref
1 = PS (IMS) SMS preferred
LTE feature disablelikely
LTE RRC capability feature-disable bitmap
/nv/item_files/modem/lte/rrc/efs/lte_feature_disable
LTE feature enablelikely
LTE RRC capability feature-enable bitmap; bit list unpublished
/nv/item_files/modem/lte/rrc/efs/lte_feature_enable
LTE band priority listlikely
Prioritised band list for LFS/FFS scans (uint16 array)
/nv/item_files/modem/lte/rrc/efs/band_priority_list_v2
PC2 whitelistunverified
Bands allowed Power Class 2 (26 dBm)
/nv/item_files/modem/lte/rrc/PC2_WHITELIST.xml
max_lte_cap_sizeunverified
LTE setting: LTE RRC / L1 / L2
/nv/item_files/modem/lte/rrc/cap/max_lte_cap_size
7000
Fake eNodeB mitigationlikely
LTE false-base-station (fake eNodeB) mitigation
/nv/item_files/modem/lte/rrc/bbq/bbq_mitigation
1 = On
whitelist_ca_comboslikely
CA combo list: LTE CA / EN-DC band-combination allow/deny list
/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos
LTE CA combos per PLMNlikely
Prune the advertised LTE CA combos per PLMN from /policyman/band_combos_per_plmn.xml
/nv/item_files/modem/mav/lte_ca_xml_generation
1 = On
blacklist_ca_comboslikely
CA combo list: LTE CA / EN-DC band-combination allow/deny list
/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos
whitelist_ca_combos_with_laalikely
CA combo list: LTE CA / EN-DC band-combination allow/deny list
/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_laa
SRVCC support
SRVCC capability indication from E-UTRAN to UTRAN (TS 23.216)
/nv/item_files/modem/nas/nas_srvcc_support
1 = On
Voice domain preference
E-UTRAN voice domain (TS 24.301 9.9.3.44)
/nv/item_files/modem/mmode/voice_domain_pref
3 = IMS PS voice preferred
drs_ul_check_enabledlikely
Dynamic RAT selection: Apple Dynamic RAT Selection (DRS): picks LTE, NSA or SA from measured throughput
/nv/item_files/modem/mav/drs_ul_check_enabled
1
drs_enablelikely
Dynamic RAT selection: Apple Dynamic RAT Selection (DRS): picks LTE, NSA or SA from measured throughput
/nv/item_files/modem/mav/drs_enable
1
drs_nsa_icon_via_motionlikely
Dynamic RAT selection: Apple Dynamic RAT Selection (DRS): picks LTE, NSA or SA from measured throughput
/nv/item_files/modem/mav/drs_nsa_icon_via_motion
1
drs_sa_cov_band_area_configlikely
Dynamic RAT selection: Apple Dynamic RAT Selection (DRS): picks LTE, NSA or SA from measured throughput
/nv/item_files/modem/mav/drs_sa_cov_band_area_config
drs_starting_ratlikely
Dynamic RAT selection: Apple Dynamic RAT Selection (DRS): picks LTE, NSA or SA from measured throughput
/nv/item_files/modem/mav/drs_starting_rat
2
No mmWave for FaceTime videolikely
Drop mmWave (FR2) during FaceTime video calls
/nv/item_files/modem/mav/disable_mmw_for_ftv
1 = On
Disable SA on null SUCIlikely
Turn off 5G SA when the SUCI uses the null protection scheme (SUPI sent unconcealed)
/nv/item_files/modem/mav/mav_disable_sa_if_null_suci
1 = On
Drop EN-DC in call hysteresislikely
Hysteresis timer before dropping EN-DC during a call
/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_val
15
Drop EN-DC in VoLTE hysteresislikely
Hysteresis timer before dropping EN-DC during a VoLTE call
/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_volte_val
15
BWP switch on screen locklikely
Move to a narrower NR bandwidth part while the screen is locked
/nv/item_files/modem/mav/enable_bwp_switching_screen_lock
1 = On
enable_fblte_based_bwp_configunverified
Apple modem option: Apple-only (Maverick) modem option; undocumented
/nv/item_files/modem/mav/enable_fblte_based_bwp_config
1
enable_fr1_scell_vrlfunverified
Apple modem option: Apple-only (Maverick) modem option; undocumented
/nv/item_files/modem/mav/enable_fr1_scell_vrlf
1
endc_whitelist_ca_comboslikely
CA combo list: LTE CA / EN-DC band-combination allow/deny list
/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos
EN-DC combos per PLMNlikely
Same per-PLMN capability pruning for EN-DC combos (next to cap_prune, skip_cap_prune)
/nv/item_files/modem/mav/endc_ca_file_generation
1 = On
nrsa_whitelist_ca_comboslikely
CA combo list: LTE CA / EN-DC band-combination allow/deny list
/nv/item_files/modem/nr5g/rrc/nrsa_whitelist_ca_combos
SA coverage bandslikely
NR bands that count as 5G SA coverage (uint8 band numbers, zero-padded)
/nv/item_files/modem/mav/mav_sa_coverage_band_list
"G"
sa_depri_td_bwp_thresh_vallikely
Smart data mode: Apple SDM: turns NR / SA off or deprioritises SA when it does not pay off
/nv/item_files/modem/mav/sa_depri_td_bwp_thresh_val
30
mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdbunverified
Apple modem option: Apple-only (Maverick) modem option; undocumented
/nv/item_files/modem/nas/mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdb
4
NR band capabilitylikely
NR band feature-capability list; proprietary layout
/nv/item_files/modem/nr5g/RRC/cap_feature_band_nr
cap_csi_rs_32_port_controllikely
NR UE capability: NR RRC UE-capability toggle
/nv/item_files/modem/nr5g/RRC/cap_csi_rs_32_port_control
cap_control_nrca_3x_f_plus_t_band_comboslikely
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_3x_f_plus_t_band_combos
16843009 0x010101010000
cap_control_nrca_f_plus_f_band_comboslikely
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_f_band_combos
257
cap_control_nrca_f_plus_t_band_comboslikely
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_t_band_combos
1
NR TDD+FDD combo controllikely
Enables NR-CA/NR-DC TDD+FDD band-combo classes
/nv/item_files/modem/nr5g/RRC/cap_control_t_plus_f_band_combos
7
cap_control_nrca_t_plus_t_band_comboslikely
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_t_plus_t_band_combos
257
sa_depri_bw_vallikely
Smart data mode: Apple SDM: turns NR / SA off or deprioritises SA when it does not pay off
/nv/item_files/modem/mav/sa_depri_bw_val
4
EPS fallback controlunverified
VoNR to EPS fallback control
/nv/item_files/modem/lte/rrc/efs/eps_fallback_control
17188459148592 0x30750000a20f0000
NR5G disable modeunverified
Disables NR5G SA and/or NSA
/nv/item_files/modem/mmode/nr5g_disable_mode
0 = NR5G enabled
3gpp_rel_versionlikely
3GPP release: Signalled 3GPP release
/nv/item_files/modem/data/3gpp/ps/3gpp_rel_version
5
Legacy NV values (3)
NVItemValue
62005PRI revision
Packed PRI Revision header
10682881 = 1.2.163 0x0102a300
1920AAGPS Positioning Modes Supportedlikely 1065
62025Delay RAU during CSFB (probable)unverified 0 = Off
Carrier Configuration Management feature groups

25 one-byte flags per group. No source names them; under each set flag is which carriers set it, across current bundles.

GroupFlags
Call Manager Feature Group
NV 62012, 1 of 25 set
0123456789101112131415161718192021222324
20: Set for every iPhone from iPhone 14, and on older iPhones only by carriers that have shut down 3G; likely the newer form of flag 14
Legacy NV item list (35)

Green ones have a value above.

3533 SMS MO Retry Interval401 GPSOne PDE TCP Address426 GPSOne PDE Port4960 HS Based Plus Dial Setting3446 TRM Configuration553 GSM A5 Algorithms Supported4432 GPRS GEA Algorithms Supported4118 HSDPA Category4210 WCDMA HSUPA Category62011 System Determination Feature Group62012 Call Manager Feature Group62013 Wireless Messaging Feature Group62014 Data Service Feature Group442 Roaming Preference58021 NV 580211920 AAGPS Positioning Modes Supported4265 VOIP Registration Mode6850 UMTS AMR Codec Preference Config1907 Authentication Require Password Encryption62026 NV 620265895 MGRF Supported852 APN Name5280 Disable CM Call Type946 Band preference bits 16-312954 Bits 32 To 63 Of Band Pref3461 ENS Enabled62025 Delay RAU during CSFB (probable)62023 NV 620234703 CGPS UMTS PDE Server Address URL6792 GNSS SUPL Version3758 AAGPS Use Transport Security909 GSM/UMTS SMS Bearer Preference62005 PRI revision62035 Feature Group (unnamed, tag 9f83e453)855 RTRE Configuration
NV path schema index (322 paths, MAVZ) 
/nv/item_files/modem/nas/lte_nas_temp_fplmn_backoff_time
/nv/item_files/ims/IMS_enable
/nv/item_files/modem/mmode/ue_usage_setting
/nv/item_files/modem/mmode/voice_domain_pref
/nv/item_files/modem/mmode/lte_disable_duration
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r8
/nv/item_files/modem/data/epc/qmi_qos
/nv/item_files/wcdma/rrc/wcdma_rrc_fast_return_to_lte_after_csfb
/nv/item_files/modem/data/3gpp/lteps/auto_connect_def_pdn
/nv/item_files/modem/mmode/lte_bandpref
/nv/item_files/modem/mmode/sms_mandatory
/nv/item_files/modem/data/3gpp/umts_nw_initiated_qos_support
/nv/item_files/modem/nas/nas_lai_change_force_lau_for_emergency
/nv/item_files/modem/data/3gpp/ps/3gpp_rel_version
/nv/item_files/modem/data/3gpp/ps/ser_req_throttle_behavior
/nv/item_files/modem/nas/hplmn_rat_order
/nv/item_files/modem/mmode/sms_only
/nv/item_files/modem/geran/grr/g2l_blind_redir_after_csfb_control
/nv/item_files/modem/mmode/sms_domain_pref
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r9
/nv/item_files/wcdma/rrc/wcdma_ppac_support
/nv/item_files/wcdma/rrc/wcdma_rrc_feature
/nv/item_files/wcdma/rrc/wcdma_rrc_wtol_ps_ho_support
/nv/item_files/modem/data/3gpp/ps/allow_infinite_throt
/nv/item_files/modem/nas/cm_efs_mav_health_monitor_control_pri
/nv/item_files/modem/nas/nas_srvcc_support
/nv/item_files/modem/sms/pri_disable_cb_dup_detection
/nv/item_files/modem/lte/ML1/cdrx_opt_info
/nv/item_files/modem/nas/ignore_uplmn
/nv/item_files/wcdma/rrc/wcdma_rrc_csfb_skip_sib11_opt
/nv/item_files/modem/nas/csg_support_configuration
/nv/item_files/modem/nas/iPLMN
/nv/item_files/modem/nas/max_validate_sim_counter
/nv/item_files/modem/nas/irat_search_timer
/nv/item_files/modem/mmode/sms_domain_pref_list
/nv/item_files/modem/mmode/qmi/mav_pri_allow_auto_answer
/ds/atcop/atcop_cops_auto_mode.txt
/nv/item_files/modem/uim/mmgsdi/refresh_retry
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r10
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r8_tdd
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r9_tdd
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r10_tdd
/nv/item_files/modem/lte_connection_control
/nv/item_files/modem/lte/rrc/cap/prune_ca_combos
/nv/item_files/modem/lte/rrc/efs/lte_conn_ctrl_barring_optimz_params
/nv/item_files/modem/data/3gpp/call_orig_allowed_before_ps_attach
/nv/item_files/wcdma/rrc/wcdma_rrc_wtol_tdd_ps_ho_support
/nv/item_files/modem/sms/mmgsdi_refresh_vote_ok
/nv/item_files/modem/uim/gstk/default_apn
/nv/item_files/modem/mmode/buffer_ims_pref_change_timer
/nv/item_files/data/3gpp/rpm_params
/nv/item_files/data/3gpp/rpm_suppported_sim
/nv/item_files/modem/geran/grr/g2l_blind_redir_after_srvcc_control
/nv/item_files/modem/data/epc/pdn_throttling_config.txt
/policyman/carrier_policy.xml
/mav/mav_police_pri_mode_pref_mask
/nv/item_files/modem/uim/mmgsdi/ens_slot_enabled
/nv/item_files/modem/nas/pri_fplmn
/nv/item_files/modem/nas/lte_nas_ignore_mt_csfb_during_volte_call
/nv/item_files/modem/data/3gpp/ps/rel_10_throttling
/nv/item_files/modem/lte/L2/mac/lte_mac_enable_aas
/nv/item_files/modem/nas/mav_rat_upgrade_from_pri
/data/ds_dsd_apm_rules.txt
/nv/item_files/modem/data/3gpp/ps/rel_10_throttling_per_plmn
/nv/item_files/modem/nas/mav_hpplmn_scan_throttler/config_params
/nv/item_files/modem/data/3gpp/lteps/allow_def_lte_pdn_teardown
/nv/item_files/modem/nas/eplmn_cell_reselect
/nv/item_files/modem/nas/hplmn_rat_order_ctrl
/data/3gpp/throttling/srv_req_throt_config.txt
/nv/item_files/wcdma/rrc/rrc_fe_fach_support
/nv/item_files/modem/nas/nas_config_feature
/nv/item_files/modem/lte/rrc/efs/ho_neigh_cell_si_acq_params
/nv/item_files/modem/lte/rrc/efs/lte_spec_feature_r11
/nv/item_files/modem/lte/rrc/efs/lte_spec_feature_r11_tdd
/nv/item_files/modem/qmi/mav_fws_gsm_key_signature_bitmask
/nv/item_files/modem/mmode/lte_rpm_info_2
/nv/item_files/modem/nas/dos_mitigation_feature_config
/nv/item_files/modem/lte/rrc/efs/lte_feature_enable
/nv/item_files/modem/lte/rrc/efs/lte_feature_disable
/nv/item_files/modem/mmode/mode_pref
/nv/item_files/modem/lte/rrc/efs/lte_rrc_sub_feature_enable
/nv/item_files/modem/lte/rrc/efs/lte_rrc_sub_feature_disable
/nv/item_files/modem/lte/rrc/efs/cell_depriority_params
/nv/item_files/modem/lte/rrc/efs/conn_rej_cell_depriority_params
/nv/item_files/modem/lte/rrc/efs/c2k_rx_config
/nv/item_files/modem/mmode/follow_tot
/nv/item_files/modem/nr5g/RRC/cep_conn_est_fail_ctrl
/nv/item_files/modem/mmode/nr5g_disable_mode
/nv/item_files/modem/uim/mmgsdi/slot_features_status_list__mav_override
/nv/item_files/modem/uim/mmgsdi/override_opl_pnn_lookup_for_non_rplmn
/nv/item_files/modem/uim/uimdrv/nv_pdown_uim_consecutive_techproblems
/nv/item_files/modem/qmi/cat/qmi_cat_block_sms_pp_env_per_sub
/nv/item_files/modem/lte/rrc/cap/max_ca_combos
/nv/item_files/modem/mmode/nr_band_pref
/nv/item_files/modem/lte/rrc/mav_rrc_reject_supported
/nv/item_files/modem/nr5g/RRC/cap_add_bw
/nv/item_files/ims/media_service_config
/nv/item_files/modem/nas/mav_sa_lte_prio_sub_band_per_plmn
/nv/item_files/modem/nas/mav_nr_prio_sub_band_per_plmn
/nv/item_files/modem/nas/mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdb
/nv/item_files/modem/nas/mav_lte_steady_camp_duration
/nv/item_files/modem/nas/mav_interlace_scan_init_timer
/nv/item_files/modem/uim/gstk/feature_bmask__mav_override
/nv/item_files/modem/mmode/nr_nsa_band_pref
/nv/item_files/modem/lte/rrc/efs/csg_control_v2
/nv/item_files/modem/mav/disable_sdm
/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_val
/nv/item_files/modem/lte/rrc/efs/disable_4l_per_band
/nv/item_files/modem/mav/lte_ca_xml_generation
/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos
/nv/item_files/modem/lte/rrc/cap/blacklist_explicit_ca_combos
/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_ulca
/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_laa
/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos_with_nc_combos
/nv/item_files/modem/mav/endc_ca_file_generation
/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos_with_ulca
/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos_with_laa
/nv/item_files/modem/nr5g/rrc/endc_blacklist_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_blacklist_explicit_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_lte_fr1_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_fr1_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_lte_fr2_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_fr2_ca_combos
/nv/item_files/modem/nas/tdscdma_op_plmn_list
/nv/item_files/modem/lte/rrc/cap/max_lte_cap_size
/nv/item_files/modem/lte/rrc/cap/max_nr_cap_size
/nv/item_files/modem/lte/rrc/cap/max_lte_nr_cap_size
/nv/item_files/modem/nr5g/RRC/cap_disable_ul_256qam
/nv/item_files/modem/data/3gpp/ps/ran_bit_rate_support
/nv/item_files/modem/nas/mav_nr_predef_narfcn
/nv/item_files/modem/nas/isr
/nv/item_files/modem/uim/gstk/feature_bmask_2__mav_override
/nv/item_files/modem/mmode/ssac_hvolte
/nv/item_files/modem/lte/rrc/efs/dsds_timers
/nv/item_files/modem/uim/uimdrv/mav_uim_wakeup_poll_timer_config
/nv/item_files/modem/lte/rrc/efs/band_priority_list_v2
/nv/item_files/modem/data/3gpp/ps/apn_reject/apn_reject_name.txt
/nv/item_files/modem/nr5g/rrc/endc_disable_specific_ul_bands
/nv/item_files/modem/lte/rrc/PC2_WHITELIST.xml
/nv/item_files/modem/lte/rrc/bbq/bbq_mitigation
/nv/item_files/modem/mmode/ims_reg_status_wait_timer
/nv/item_files/modem/lte/rrc/efs/lte_connection_ctrl_params
/nv/item_files/modem/mmode/scan_scope_rule
/nv/item_files/modem/data/dsmgr/pdu_session_id_inclusion
/nv/reg_files/modem/lte/rrc/csp/pref_freq_list
/nv/item_files/modem/mav/local_crp_hysteresis_tmr_val
/nv/item_files/modem/uim/gstk/mav_svc_notification_to_card_upon_restricted_mode_exit_latency_config
/nv/item_files/modem/nas/is_eps_rplmn_from_sim_needed
/nv/item_files/modem/nr5g/RRC/cre_thermal_ota_cause
/nv/item_files/modem/lte/rrc/efs/data_inactivity_control
/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_volte_val
/nv/item_files/modem/lte/ML1/fr2_priority_optimization
/nv/item_files/modem/mav/volte_screen_on_hysteresis_tmr_val
/nv/item_files/modem/nas/skip_acb_check_drb_est_ims_registration
/nv/item_files/modem/mav/mav_monitor_enable_nr5g_uwb_based_on_motion_state_no_uli_case
/nv/item_files/modem/nas/is_x_to_nr_enabled
/nv/item_files/modem/nr5g/RRC/meas_pruning
/nv/item_files/modem/mav/disable_mmw_for_ftv
/nv/item_files/modem/mav/disable_fr1_for_lpm
/nv/item_files/modem/data/3gpp/ps/set_volte_call_type
/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_max_reg_failure
/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_voice_not_avail_based_on_motion_st
/nv/item_files/modem/mav/mav_monitor_enable_nr5g_uwb_based_on_motion_state
/nv/item_files/modem/nas/mav_pssi_reg_follow_rplmn_rat_order_power_up
/nv/item_files/modem/nr5g/RRC/cap_per_plmn_limit_bw
/policyman/5g_roaming_feature_enabled.xml
/nv/item_files/modem/nas/lte_fast_cfl_search_timer
/nv/item_files/modem/nr5g/rrc/endc_blacklist_fr1_fdd_tdd_ca_combos
/nv/item_files/modem/nr5g/RRC/cap_srs_tx_switch_control
/data/3gpp/data_3gpp_dynamic_config.xml
/nv/item_files/modem/nr5g/RRC/cap_csi_rs_32_port_control
/nv/item_files/modem/lte/rrc/efs/hst_scan_params
/nv/item_files/modem/data/3gpp/reset_non_spec_throttle_with_reattach_required
/nv/item_files/modem/nas/mav_lte_reject_smc_null_ciphering
/nv/item_files/modem/nas/mav_nr_reject_smc_null_ciphering
/nv/item_files/modem/mmode/sd/mav_oos_search_rbs_n_dbs
/nv/item_files/modem/nr5g/rrc/nrsa_blacklist_ca_combos
/nv/item_files/modem/nr5g/rrc/nrsa_blacklist_explicit_ca_combos
/nv/item_files/modem/nr5g/rrc/nrsa_reduced_cc_fr1_ca_combos
/nv/item_files/modem/nr5g/rrc/nrsa_blacklist_fr1_fdd_tdd_ca_combos
/nv/item_files/modem/maverick/uim/apps/card_prov_strategy
/nv/item_files/modem/mav/sa_depri_bw_val
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_t_band_combos
/nv/item_files/modem/nr5g/RRC/cap_control_mrdc_f_plus_t_band_combos
/nv/item_files/modem/mav/mav_disable_sa_if_null_suci
/nv/item_files/modem/nr5g/RRC/cap_control_mrdc_t_plus_t_band_combos
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_t_plus_t_band_combos
/nv/item_files/modem/mav/override_icon_based_on_sa_coverage
/policyman/5g_sa_roaming_feature_enabled.xml
/nv/item_files/modem/mav/cap_prune_efs_version
/nv/item_files/modem/nr5g/RRC/cap_prune
/nv/item_files/modem/nas/t3411_value_during_mmtel_call
/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos
/nv/item_files/modem/mav/mav_avoid_uwb_roaming
/nv/item_files/modem/nr5g/rrc/endc_blacklist_ca_combos_with_nc_combos
/nv/item_files/modem/nas/ehplmn_nv
/nv/item_files/modem/nas/is_ehplmn_nv_set
/nv/item_files/modem/nas/emm_nas_nv_items
/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_ims_reg_failure_timer
/nv/item_files/modem/mmode/mav_volte_disable_ims_reg_wait_timer_hplmn
/nv/item_files/modem/nas/force_esr_ndds_for_lte_only
/nv/item_files/modem/nas/force_esr_ndds_cust
/nv/item_files/modem/mmode/sd/e911_prioritize_cs
/policyman/l2nr_policy.xml
/nv/item_files/modem/uim/uimdrv/uim_check_sim_status_apm_off
/nv/item_files/modem/data/3gpp/ps/l2nr_fast_return_params
/nv/item_files/modem/data/3gpp/ps/nr5g_ran_bit_rate_support
/nv/item_files/data/3gpp/ds_3gpp_mtu
/nv/item_files/modem/nr5g/RRC/cap_feature_band_nr
/nv/item_files/modem/nr5g/RRC/cap_feature_pdcp
/nv/item_files/wcdma/rrc/rrc_req_lte_for_truncated_ca
/nv/item_files/modem/nr5g/rrc/nrsa_whitelist_ca_combos
/nv/item_files/modem/mav/mav_monitor_replace_nr5g_uc_with_nr_basic
/nv/item_files/modem/data/3gpp/ps/uw_allow_abnormal_default
/nv/item_files/modem/mav/mav_monitor_mm_mb_replace_nr5g_with_nr5guwb
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_f_band_combos
/nv/item_files/modem/nr5g/RRC/cap_control_t_plus_f_band_combos
/nv/item_files/modem/mmode/nr5g_emc_support
/nv/item_files/modem/nas/mt_detach_abnormal_handling
/nv/item_files/modem/mav/mav_avoid_pco_for_aging
/nv/item_files/modem/mav/mav_ignore_n77_mm_coverage_exit_check
/nv/item_files/modem/mav/mav_ignore_high_bw_check
/nv/item_files/modem/mav/mav_ignore_cell_change_check
/nv/item_files/modem/nr5g/rrc/endc_blacklist_specific_lte_bands
/nv/item_files/modem/nr5g/RRC/band_priority_list
/nv/item_files/modem/nr5g/RRC/cap_feature_phy
/nv/item_files/modem/nas/ehplmn_nv_new
/nv/item_files/modem/mav/sdm_nsa_icon_override
/policyman/5g_plus_5g_always.xml
/policyman/5g_sa_allowed_on_ndds.xml
/nv/item_files/modem/mav/enable_bwp_switching_screen_lock
/nv/item_files/modem/nr5g/RRC/cap_trigger_rcu_empty_active_combo
/nv/item_files/mav/is_bootstrap_profile
/nv/item_files/modem/mav/cdm_feature_enable_status
/nv/item_files/modem/mmode/lte_bandpref_extn_65_256
/policyman/private_mcc_handling
/nv/item_files/modem/nas/nr_disable_duration
/nv/item_files/modem/nr5g/RRC/cap_feature_general_params
/nv/item_files/modem/nr5g/RRC/cap_srs_carrier_switch_per_plmn_control_v2
/nv/item_files/modem/nr5g/RRC/cap_feature_meas_and_mobs
/nv/item_files/modem/nas/mm5g_eps_mobility_ra_cap_update
/nv/item_files/wcdma/rrc/rrc_pseudo_meas_info
/nv/item_files/modem/nr5g/RRC/cap_feature_per_features_set_params
/nv/item_files/modem/mmode/mav_unblock_nr_fplmn
/nv/item_files/modem/mav/sa_depri_td_bwp_thresh_val
/nv/item_files/modem/nr5g/RRC/nr5g_3gpp_release_ver
/nv/item_files/modem/lte/rrc/efs/lte_3gpp_release_ver
/nv/item_files/modem/nas/iplmn_preferred
/nv/item_files/modem/mav/prune_fr1_fr2_due_to_volte_enable
/nv/item_files/modem/mav/drs_enable
/nv/item_files/modem/mav/drs_starting_rat
/nv/item_files/modem/mav/drs_dl_enabled_no_locdb
/nv/item_files/modem/mav/drs_ul_check_enabled
/nv/item_files/modem/mav/dl_bin_config
/nv/item_files/modem/mav/drs_sa_penetrate_cov_area_config
/nv/item_files/modem/mav/drs_sa_cov_band_area_config
/nv/item_files/modem/mav/drs_bw_threshold
/nv/item_files/modem/mav/drs_nsa_icon_via_motion
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_3x_f_plus_t_band_combos
/nv/item_files/modem/nr5g/RRC/cap_control_dl_256qam
/nv/item_files/modem/nr5g/RRC/cap_control_4cc_ulca_fr2
/nv/item_files/modem/mmode/nrdc_mode
/nv/item_files/modem/mav/uwb_nr_band_bw
/nv/item_files/modem/mav/enable_fr1_scell_vrlf
/nv/item_files/modem/mav/mav_sa_coverage_band_list
/nv/item_files/modem/nas/nr_t3517_config
/nv/item_files/modem/nr5g/RRC/failure_mgr_efs_nrdc_list_cfg
/nv/item_files/modem/lte/rrc/efs/eps_fallback_control
/nv/item_files/modem/mmode/nr5g_plmn_blocking_timer
/nv/item_files/modem/mav/drs_enable_tau_rej_opt
/nv/item_files/modem/mav/bwp_switch_tmr_val
/nv/item_files/modem/mav/bwp_switch_tmr_val_sl
/nv/item_files/modem/nas/pri_fplmn_ext
/nv/item_files/modem/nas/mav_dicr
/nv/item_files/modem/mav/enable_fblte_based_bwp_config
/nv/item_files/modem/mav/skip_cap_prune
/nv/item_files/modem/mav/mav_rlgs_nr5g_config_burst_len
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_4x_f_plus_t_band_combos
/nv/item_files/modem/nr5g/RRC/cap_swul_control
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_3x_t_plus_t_band_combos
/nv/item_files/modem/nr5g/RRC/cap_msg_segmentation
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_2x_f_plus_t_band_combos
/nv/item_files/modem/nr5g/RRC/cap_feature_mac
/nv/item_files/modem/mav/enable_rlgs_fr2
/nv/item_files/modem/mav/mav_dmc_enabled
/nv/item_files/modem/mav/5g_allowed_ndds
/nv/item_files/modem/mav/5g_plus_5g_always
/nv/item_files/modem/nas/mav_epplmn
/nv/item_files/modem/mav/rrc_ver_dg_enable_lte_ref_sig
/nv/item_files/modem/mav/enable_dyn_sa
/nv/item_files/modem/mav/enable_dyn_vonr
/nv/item_files/modem/mav/vzw_pco_check
/nv/item_files/modem/mav/mav_dmc_disabled
/nv/item_files/modem/mmode/mav_rat_no_srv_update_hold_timer
/nv/item_files/modem/mmode/max_ims_reg_attempt_timer
/nv/item_files/modem/nr5g/RRC/cap_control_simul_rx_tx_inter_band_pair
/nv/item_files/modem/lte/ML1/tdd_over_fdd_opt
/nv/item_files/modem/nas/unblock_plmn_without_voice
/nv/item_files/modem/mav/mav_skip_sms_only_ims_pref_ind_on_sa
/nv/item_files/modem/lte/ML1/ard_config
/nv/item_files/modem/lte/ML1/traffic_forced_r1
/nv/item_files/modem/mav/disable_sa_icon_based_on_l2nr_mr
/nv/item_files/modem/mav/disable_sdm_nw_slicing
/nv/item_files/modem/mav/disable_sa_icon_based_on_idle_l2nr_meas
/nv/item_files/modem/nr5g/ML1/srch_conn_ttt_short
/nv/item_files/modem/nas/mav_nr_in_roam_reject_smc_null_ciphering
/nv/item_files/modem/mav/enable_sa_roaming
/nv/item_files/modem/mav/disable_sa_icon_based_on_restrict_dcnr
/nv/item_files/modem/mav/mav_disable_sa_no_ciph
/nv/item_files/modem/mmode/mav_sa_only_carrier
/nv/item_files/modem/nas/mav_pssi_reg_gfnh_allowed_plmn_per_carrier
/nv/item_files/modem/mav/rel_pref_config
/nv/item_files/modem/lte/ML1/num_enb_tx_ant
/nv/item_files/modem/mav/enable_ds_mitigation
/nv/item_files/modem/nas/disable_sensitive_information
/nv/item_files/gps/cgps/sm/gnss_text_to_emergency_window
/nv/item_files/modem/mav/enable_ds_mit_for_marginal_coverage
/nv/item_files/modem/mmode/sd/mav_sd_emerg_call_allow_lmtd_srv
/nv/item_files/modem/mav/mav_monitor_3cc_check_for_5gA
/nv/item_files/modem/mav/mav_monitor_nr5g_5gA_agg_bw_thrshld
/nv/item_files/modem/nas/mav_pssi_reg_gfnh_allowed_frequencies_per_carrier
Unidentified fields (1)
TagnlenValueNote
9fa71012b200 (178)small binary blob that precedes the NV item list
Modem defaults

From the iOS 27.0.1 Qualcomm X75 · Mav24 package, before this bundle's .der.pri.

Band combos

TMO MVNO on 310-160 310-200 310-210 310-220 310-230 310-240 310-250 310-260 310-270 310-310 310-490 310-660 310-800 311-660 311-882
PlatformsCombosEN-DCNRLTENR-DCMax CCNR bandsLTE anchors
P1P4P5P6P7 30279223055n25 n41 n66 n71 n77
FR2 n258 n260 n261		B2 B12 B48 B66 B71

Package files this bundle replaces

EFS pathPackage copy
/policyman/carrier_policy.xmlbbcfg.mbn P1P4P5P6P7 Compare

1 more XML values set paths the package leaves unset.

782 carriers, 225 countries · iOS 27.0.1 (24A446) · beta iOS 27.2 beta 2 (24B5089g) GitHub Ready