carrier-explode iOS carrier and country bundles
TMobile_MVNO_USUnitedStates country bundle
  1. iOS 27.2 beta 1–2 image · build 72.7.1
  2. iOS 27.0 – 27.0.1 image · build 72.0
  3. iOS 26.5 – 26.6.2 image · build 70.0
  4. iOS 26.4 – 26.4.2 image · build 69.0
  5. iOS 26.3 – 26.3.1 image · build 68.0
  6. iOS 26.2 – 26.2.1 image · build 67.0
  7. iOS 26.1 image · build 66.0
  8. iOS 26.0 – 26.0.1 image · build 65.0
  9. OTA · iOS 12.3+ · build 36.1
  10. OTA · iOS 11.3+ · build 32.1
  11. OTA · iOS 11.1+ · build 30.1
  12. OTA · iOS 10.3+ · build 28.3
  13. OTA · iOS 10.2+ · build 27.2
  14. OTA · iOS 10.1+ · build 26.1
  15. OTA · iOS 10.0+ · build 25.2
  16. OTA · iOS 9.3+ · build 24.1
  17. OTA · iOS 9.2+ · build 23.1
  18. OTA · iOS 9.0+ · build 21.1
iOS 27.0 – 27.0.1 image · build 72.0 (18)
  1. iOS 27.2 beta 1–2 image · build 72.7.1
  2. iOS 27.0 – 27.0.1 image · build 72.0
  3. iOS 26.5 – 26.6.2 image · build 70.0
  4. iOS 26.4 – 26.4.2 image · build 69.0
  5. iOS 26.3 – 26.3.1 image · build 68.0
  6. iOS 26.2 – 26.2.1 image · build 67.0
  7. iOS 26.1 image · build 66.0
  8. iOS 26.0 – 26.0.1 image · build 65.0
  9. OTA · iOS 12.3+ · build 36.1
  10. OTA · iOS 11.3+ · build 32.1
  11. OTA · iOS 11.1+ · build 30.1
  12. OTA · iOS 10.3+ · build 28.3
  13. OTA · iOS 10.2+ · build 27.2
  14. OTA · iOS 10.1+ · build 26.1
  15. OTA · iOS 10.0+ · build 25.2
  16. OTA · iOS 9.3+ · build 24.1
  17. OTA · iOS 9.2+ · build 23.1
  18. OTA · iOS 9.0+ · build 21.1
PhonesModemOverride file
iPhone 16, 16 Plus, 16 Pro, 16 Pro MaxQualcomm X75 · Mav24overrides_D93_D94_D47_D48.der.pri
iPhone 11, 11 Pro, 11 Pro Max, 12, 12 mini, 12 Pro, 12 Pro Max, 13, 13 mini, 13 Pro, 13 Pro Max, 14, 14 Plus, 14 Pro, 14 Pro Max, 15, 15 Plus, 15 Pro, 15 Pro Max, SE (2nd generation), SE (3rd generation)Qualcomm · Mav23, Qualcomm · Mav22, Qualcomm · Mav30, Qualcomm · Mav21, Qualcomm · Mav20, Intel · ICE19None: package defaults
iPhone 16e, 17, 17 Pro, 17 Pro Max, 17e, Air, iPhone19,2, iPhone19,3, iPhone19,7Apple · c4020, Qualcomm X80 · Mav25, Apple C1Unknown: no copy of this bundle made for them
overrides_D93_D94_D47_D48.der.pri
Header
Written forQualcomm modem
PRI Revision1.1.162
Baseband overrides (25)
SettingValue
APM ruleslikely
Attach PDN Manager rules (which PDN is required for attach)
/data/ds_dsd_apm_rules.txt
"APN_String:wholesale; ATTACH_TYPE_RULES:TRUE; P-CSCFRequired:4; IPAddressRequired:5; DNSAddressRequired:4; P-CSCF_OR_DNSAddressRequired:4; ON_DEMAND_TYPE_RULES:TRUE; P-CSCFRequired:4; IPAddressRequired:5; DNSAddressRequired:4; P-CSCF_OR_DNSAddressRequired:4; "
mav_pssi_reg_unblock_hplmn_max_reg_failurelikely
PSSI registration rule: Apple PLMN search / system-selection (PSSI) registration tuning
/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_max_reg_failure
1
mav_pssi_reg_unblock_hplmn_voice_not_avail_based_on_motion_stlikely
PSSI registration rule: Apple PLMN search / system-selection (PSSI) registration tuning
/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_voice_not_avail_based_on_motion_st
1
IMS enable
Enables the IMS task (VoLTE, VoWiFi, SMS over IMS)
/nv/item_files/ims/IMS_enable
2
IMS media service configunverified
IMS media (codec/RTP) service config; no public schema
/nv/item_files/ims/media_service_config
SMS domain preference listunverified
Per-RAT/PLMN SMS domain list; layout not public
/nv/item_files/modem/mmode/sms_domain_pref_list
Block SMS-PP envelopelikely
Block SIM Toolkit SMS-PP (data download) envelopes, per subscription
/nv/item_files/modem/qmi/cat/qmi_cat_block_sms_pp_env_per_sub
0 = Off
SMS domain preference
SMS over IMS preference
/nv/item_files/modem/mmode/sms_domain_pref
1 = PS (IMS) SMS preferred
LTE feature disablelikely
LTE RRC capability feature-disable bitmap
/nv/item_files/modem/lte/rrc/efs/lte_feature_disable
LTE feature enablelikely
LTE RRC capability feature-enable bitmap; bit list unpublished
/nv/item_files/modem/lte/rrc/efs/lte_feature_enable
LTE band priority listlikely
Prioritised band list for LFS/FFS scans (uint16 array)
/nv/item_files/modem/lte/rrc/efs/band_priority_list_v2
PC2 whitelistunverified
Bands allowed Power Class 2 (26 dBm)
/nv/item_files/modem/lte/rrc/PC2_WHITELIST.xml
max_lte_cap_sizeunverified
LTE setting: LTE RRC / L1 / L2
/nv/item_files/modem/lte/rrc/cap/max_lte_cap_size
7000
Fake eNodeB mitigationlikely
LTE false-base-station (fake eNodeB) mitigation
/nv/item_files/modem/lte/rrc/bbq/bbq_mitigation
1 = On
whitelist_ca_comboslikely
CA combo list: LTE CA / EN-DC band-combination allow/deny list
/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos
LTE CA combos per PLMNlikely
Prune the advertised LTE CA combos per PLMN from /policyman/band_combos_per_plmn.xml
/nv/item_files/modem/mav/lte_ca_xml_generation
1 = On
blacklist_ca_comboslikely
CA combo list: LTE CA / EN-DC band-combination allow/deny list
/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos
whitelist_ca_combos_with_laalikely
CA combo list: LTE CA / EN-DC band-combination allow/deny list
/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_laa
SRVCC support
SRVCC capability indication from E-UTRAN to UTRAN (TS 23.216)
/nv/item_files/modem/nas/nas_srvcc_support
1 = On
Voice domain preference
E-UTRAN voice domain (TS 24.301 9.9.3.44)
/nv/item_files/modem/mmode/voice_domain_pref
3 = IMS PS voice preferred
No mmWave for FaceTime videolikely
Drop mmWave (FR2) during FaceTime video calls
/nv/item_files/modem/mav/disable_mmw_for_ftv
1 = On
Drop EN-DC in call hysteresislikely
Hysteresis timer before dropping EN-DC during a call
/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_val
15
Drop EN-DC in VoLTE hysteresislikely
Hysteresis timer before dropping EN-DC during a VoLTE call
/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_volte_val
15
cap_csi_rs_32_port_controllikely
NR UE capability: NR RRC UE-capability toggle
/nv/item_files/modem/nr5g/RRC/cap_csi_rs_32_port_control
3gpp_rel_versionlikely
3GPP release: Signalled 3GPP release
/nv/item_files/modem/data/3gpp/ps/3gpp_rel_version
5
Legacy NV values (3)
NVItemValue
62005PRI revision
Packed PRI Revision header
10617089 = 1.1.162 0x0101a200
1920AAGPS Positioning Modes Supportedlikely 1065
62025Delay RAU during CSFB (probable)unverified 0 = Off
Carrier Configuration Management feature groups

25 one-byte flags per group. No source names them; under each set flag is which carriers set it, across current bundles.

GroupFlags
Call Manager Feature Group
NV 62012, 1 of 25 set
0123456789101112131415161718192021222324
20: Set for every iPhone from iPhone 14, and on older iPhones only by carriers that have shut down 3G; likely the newer form of flag 14
Legacy NV item list (35)

Green ones have a value above.

3533 SMS MO Retry Interval401 GPSOne PDE TCP Address426 GPSOne PDE Port4960 HS Based Plus Dial Setting3446 TRM Configuration553 GSM A5 Algorithms Supported4432 GPRS GEA Algorithms Supported4118 HSDPA Category4210 WCDMA HSUPA Category62011 System Determination Feature Group62012 Call Manager Feature Group62013 Wireless Messaging Feature Group62014 Data Service Feature Group442 Roaming Preference58021 NV 580211920 AAGPS Positioning Modes Supported4265 VOIP Registration Mode6850 UMTS AMR Codec Preference Config1907 Authentication Require Password Encryption62026 NV 620265895 MGRF Supported852 APN Name5280 Disable CM Call Type946 Band preference bits 16-312954 Bits 32 To 63 Of Band Pref3461 ENS Enabled62025 Delay RAU during CSFB (probable)62023 NV 620234703 CGPS UMTS PDE Server Address URL6792 GNSS SUPL Version3758 AAGPS Use Transport Security909 GSM/UMTS SMS Bearer Preference62005 PRI revision62035 Feature Group (unnamed, tag 9f83e453)855 RTRE Configuration
NV path schema index (322 paths, MAVZ) 
/nv/item_files/modem/nas/lte_nas_temp_fplmn_backoff_time
/nv/item_files/ims/IMS_enable
/nv/item_files/modem/mmode/ue_usage_setting
/nv/item_files/modem/mmode/voice_domain_pref
/nv/item_files/modem/mmode/lte_disable_duration
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r8
/nv/item_files/modem/data/epc/qmi_qos
/nv/item_files/wcdma/rrc/wcdma_rrc_fast_return_to_lte_after_csfb
/nv/item_files/modem/data/3gpp/lteps/auto_connect_def_pdn
/nv/item_files/modem/mmode/lte_bandpref
/nv/item_files/modem/mmode/sms_mandatory
/nv/item_files/modem/data/3gpp/umts_nw_initiated_qos_support
/nv/item_files/modem/nas/nas_lai_change_force_lau_for_emergency
/nv/item_files/modem/data/3gpp/ps/3gpp_rel_version
/nv/item_files/modem/data/3gpp/ps/ser_req_throttle_behavior
/nv/item_files/modem/nas/hplmn_rat_order
/nv/item_files/modem/mmode/sms_only
/nv/item_files/modem/geran/grr/g2l_blind_redir_after_csfb_control
/nv/item_files/modem/mmode/sms_domain_pref
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r9
/nv/item_files/wcdma/rrc/wcdma_ppac_support
/nv/item_files/wcdma/rrc/wcdma_rrc_feature
/nv/item_files/wcdma/rrc/wcdma_rrc_wtol_ps_ho_support
/nv/item_files/modem/data/3gpp/ps/allow_infinite_throt
/nv/item_files/modem/nas/cm_efs_mav_health_monitor_control_pri
/nv/item_files/modem/nas/nas_srvcc_support
/nv/item_files/modem/sms/pri_disable_cb_dup_detection
/nv/item_files/modem/lte/ML1/cdrx_opt_info
/nv/item_files/modem/nas/ignore_uplmn
/nv/item_files/wcdma/rrc/wcdma_rrc_csfb_skip_sib11_opt
/nv/item_files/modem/nas/csg_support_configuration
/nv/item_files/modem/nas/iPLMN
/nv/item_files/modem/nas/max_validate_sim_counter
/nv/item_files/modem/nas/irat_search_timer
/nv/item_files/modem/mmode/sms_domain_pref_list
/nv/item_files/modem/mmode/qmi/mav_pri_allow_auto_answer
/ds/atcop/atcop_cops_auto_mode.txt
/nv/item_files/modem/uim/mmgsdi/refresh_retry
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r10
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r8_tdd
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r9_tdd
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r10_tdd
/nv/item_files/modem/lte_connection_control
/nv/item_files/modem/lte/rrc/cap/prune_ca_combos
/nv/item_files/modem/lte/rrc/efs/lte_conn_ctrl_barring_optimz_params
/nv/item_files/modem/data/3gpp/call_orig_allowed_before_ps_attach
/nv/item_files/wcdma/rrc/wcdma_rrc_wtol_tdd_ps_ho_support
/nv/item_files/modem/sms/mmgsdi_refresh_vote_ok
/nv/item_files/modem/uim/gstk/default_apn
/nv/item_files/modem/mmode/buffer_ims_pref_change_timer
/nv/item_files/data/3gpp/rpm_params
/nv/item_files/data/3gpp/rpm_suppported_sim
/nv/item_files/modem/geran/grr/g2l_blind_redir_after_srvcc_control
/nv/item_files/modem/data/epc/pdn_throttling_config.txt
/policyman/carrier_policy.xml
/mav/mav_police_pri_mode_pref_mask
/nv/item_files/modem/uim/mmgsdi/ens_slot_enabled
/nv/item_files/modem/nas/pri_fplmn
/nv/item_files/modem/nas/lte_nas_ignore_mt_csfb_during_volte_call
/nv/item_files/modem/data/3gpp/ps/rel_10_throttling
/nv/item_files/modem/lte/L2/mac/lte_mac_enable_aas
/nv/item_files/modem/nas/mav_rat_upgrade_from_pri
/data/ds_dsd_apm_rules.txt
/nv/item_files/modem/data/3gpp/ps/rel_10_throttling_per_plmn
/nv/item_files/modem/nas/mav_hpplmn_scan_throttler/config_params
/nv/item_files/modem/data/3gpp/lteps/allow_def_lte_pdn_teardown
/nv/item_files/modem/nas/eplmn_cell_reselect
/nv/item_files/modem/nas/hplmn_rat_order_ctrl
/data/3gpp/throttling/srv_req_throt_config.txt
/nv/item_files/wcdma/rrc/rrc_fe_fach_support
/nv/item_files/modem/nas/nas_config_feature
/nv/item_files/modem/lte/rrc/efs/ho_neigh_cell_si_acq_params
/nv/item_files/modem/lte/rrc/efs/lte_spec_feature_r11
/nv/item_files/modem/lte/rrc/efs/lte_spec_feature_r11_tdd
/nv/item_files/modem/qmi/mav_fws_gsm_key_signature_bitmask
/nv/item_files/modem/mmode/lte_rpm_info_2
/nv/item_files/modem/nas/dos_mitigation_feature_config
/nv/item_files/modem/lte/rrc/efs/lte_feature_enable
/nv/item_files/modem/lte/rrc/efs/lte_feature_disable
/nv/item_files/modem/mmode/mode_pref
/nv/item_files/modem/lte/rrc/efs/lte_rrc_sub_feature_enable
/nv/item_files/modem/lte/rrc/efs/lte_rrc_sub_feature_disable
/nv/item_files/modem/lte/rrc/efs/cell_depriority_params
/nv/item_files/modem/lte/rrc/efs/conn_rej_cell_depriority_params
/nv/item_files/modem/lte/rrc/efs/c2k_rx_config
/nv/item_files/modem/mmode/follow_tot
/nv/item_files/modem/nr5g/RRC/cep_conn_est_fail_ctrl
/nv/item_files/modem/mmode/nr5g_disable_mode
/nv/item_files/modem/uim/mmgsdi/slot_features_status_list__mav_override
/nv/item_files/modem/uim/mmgsdi/override_opl_pnn_lookup_for_non_rplmn
/nv/item_files/modem/uim/uimdrv/nv_pdown_uim_consecutive_techproblems
/nv/item_files/modem/qmi/cat/qmi_cat_block_sms_pp_env_per_sub
/nv/item_files/modem/lte/rrc/cap/max_ca_combos
/nv/item_files/modem/mmode/nr_band_pref
/nv/item_files/modem/lte/rrc/mav_rrc_reject_supported
/nv/item_files/modem/nr5g/RRC/cap_add_bw
/nv/item_files/ims/media_service_config
/nv/item_files/modem/nas/mav_sa_lte_prio_sub_band_per_plmn
/nv/item_files/modem/nas/mav_nr_prio_sub_band_per_plmn
/nv/item_files/modem/nas/mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdb
/nv/item_files/modem/nas/mav_lte_steady_camp_duration
/nv/item_files/modem/nas/mav_interlace_scan_init_timer
/nv/item_files/modem/uim/gstk/feature_bmask__mav_override
/nv/item_files/modem/mmode/nr_nsa_band_pref
/nv/item_files/modem/lte/rrc/efs/csg_control_v2
/nv/item_files/modem/mav/disable_sdm
/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_val
/nv/item_files/modem/lte/rrc/efs/disable_4l_per_band
/nv/item_files/modem/mav/lte_ca_xml_generation
/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos
/nv/item_files/modem/lte/rrc/cap/blacklist_explicit_ca_combos
/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_ulca
/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_laa
/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos_with_nc_combos
/nv/item_files/modem/mav/endc_ca_file_generation
/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos_with_ulca
/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos_with_laa
/nv/item_files/modem/nr5g/rrc/endc_blacklist_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_blacklist_explicit_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_lte_fr1_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_fr1_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_lte_fr2_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_fr2_ca_combos
/nv/item_files/modem/nas/tdscdma_op_plmn_list
/nv/item_files/modem/lte/rrc/cap/max_lte_cap_size
/nv/item_files/modem/lte/rrc/cap/max_nr_cap_size
/nv/item_files/modem/lte/rrc/cap/max_lte_nr_cap_size
/nv/item_files/modem/nr5g/RRC/cap_disable_ul_256qam
/nv/item_files/modem/data/3gpp/ps/ran_bit_rate_support
/nv/item_files/modem/nas/mav_nr_predef_narfcn
/nv/item_files/modem/nas/isr
/nv/item_files/modem/uim/gstk/feature_bmask_2__mav_override
/nv/item_files/modem/mmode/ssac_hvolte
/nv/item_files/modem/lte/rrc/efs/dsds_timers
/nv/item_files/modem/uim/uimdrv/mav_uim_wakeup_poll_timer_config
/nv/item_files/modem/lte/rrc/efs/band_priority_list_v2
/nv/item_files/modem/data/3gpp/ps/apn_reject/apn_reject_name.txt
/nv/item_files/modem/nr5g/rrc/endc_disable_specific_ul_bands
/nv/item_files/modem/lte/rrc/PC2_WHITELIST.xml
/nv/item_files/modem/lte/rrc/bbq/bbq_mitigation
/nv/item_files/modem/mmode/ims_reg_status_wait_timer
/nv/item_files/modem/lte/rrc/efs/lte_connection_ctrl_params
/nv/item_files/modem/mmode/scan_scope_rule
/nv/item_files/modem/data/dsmgr/pdu_session_id_inclusion
/nv/reg_files/modem/lte/rrc/csp/pref_freq_list
/nv/item_files/modem/mav/local_crp_hysteresis_tmr_val
/nv/item_files/modem/uim/gstk/mav_svc_notification_to_card_upon_restricted_mode_exit_latency_config
/nv/item_files/modem/nas/is_eps_rplmn_from_sim_needed
/nv/item_files/modem/nr5g/RRC/cre_thermal_ota_cause
/nv/item_files/modem/lte/rrc/efs/data_inactivity_control
/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_volte_val
/nv/item_files/modem/lte/ML1/fr2_priority_optimization
/nv/item_files/modem/mav/volte_screen_on_hysteresis_tmr_val
/nv/item_files/modem/nas/skip_acb_check_drb_est_ims_registration
/nv/item_files/modem/mav/mav_monitor_enable_nr5g_uwb_based_on_motion_state_no_uli_case
/nv/item_files/modem/nas/is_x_to_nr_enabled
/nv/item_files/modem/nr5g/RRC/meas_pruning
/nv/item_files/modem/mav/disable_mmw_for_ftv
/nv/item_files/modem/mav/disable_fr1_for_lpm
/nv/item_files/modem/data/3gpp/ps/set_volte_call_type
/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_max_reg_failure
/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_voice_not_avail_based_on_motion_st
/nv/item_files/modem/mav/mav_monitor_enable_nr5g_uwb_based_on_motion_state
/nv/item_files/modem/nas/mav_pssi_reg_follow_rplmn_rat_order_power_up
/nv/item_files/modem/nr5g/RRC/cap_per_plmn_limit_bw
/policyman/5g_roaming_feature_enabled.xml
/nv/item_files/modem/nas/lte_fast_cfl_search_timer
/nv/item_files/modem/nr5g/rrc/endc_blacklist_fr1_fdd_tdd_ca_combos
/nv/item_files/modem/nr5g/RRC/cap_srs_tx_switch_control
/data/3gpp/data_3gpp_dynamic_config.xml
/nv/item_files/modem/nr5g/RRC/cap_csi_rs_32_port_control
/nv/item_files/modem/lte/rrc/efs/hst_scan_params
/nv/item_files/modem/data/3gpp/reset_non_spec_throttle_with_reattach_required
/nv/item_files/modem/nas/mav_lte_reject_smc_null_ciphering
/nv/item_files/modem/nas/mav_nr_reject_smc_null_ciphering
/nv/item_files/modem/mmode/sd/mav_oos_search_rbs_n_dbs
/nv/item_files/modem/nr5g/rrc/nrsa_blacklist_ca_combos
/nv/item_files/modem/nr5g/rrc/nrsa_blacklist_explicit_ca_combos
/nv/item_files/modem/nr5g/rrc/nrsa_reduced_cc_fr1_ca_combos
/nv/item_files/modem/nr5g/rrc/nrsa_blacklist_fr1_fdd_tdd_ca_combos
/nv/item_files/modem/maverick/uim/apps/card_prov_strategy
/nv/item_files/modem/mav/sa_depri_bw_val
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_t_band_combos
/nv/item_files/modem/nr5g/RRC/cap_control_mrdc_f_plus_t_band_combos
/nv/item_files/modem/mav/mav_disable_sa_if_null_suci
/nv/item_files/modem/nr5g/RRC/cap_control_mrdc_t_plus_t_band_combos
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_t_plus_t_band_combos
/nv/item_files/modem/mav/override_icon_based_on_sa_coverage
/policyman/5g_sa_roaming_feature_enabled.xml
/nv/item_files/modem/mav/cap_prune_efs_version
/nv/item_files/modem/nr5g/RRC/cap_prune
/nv/item_files/modem/nas/t3411_value_during_mmtel_call
/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos
/nv/item_files/modem/mav/mav_avoid_uwb_roaming
/nv/item_files/modem/nr5g/rrc/endc_blacklist_ca_combos_with_nc_combos
/nv/item_files/modem/nas/ehplmn_nv
/nv/item_files/modem/nas/is_ehplmn_nv_set
/nv/item_files/modem/nas/emm_nas_nv_items
/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_ims_reg_failure_timer
/nv/item_files/modem/mmode/mav_volte_disable_ims_reg_wait_timer_hplmn
/nv/item_files/modem/nas/force_esr_ndds_for_lte_only
/nv/item_files/modem/nas/force_esr_ndds_cust
/nv/item_files/modem/mmode/sd/e911_prioritize_cs
/policyman/l2nr_policy.xml
/nv/item_files/modem/uim/uimdrv/uim_check_sim_status_apm_off
/nv/item_files/modem/data/3gpp/ps/l2nr_fast_return_params
/nv/item_files/modem/data/3gpp/ps/nr5g_ran_bit_rate_support
/nv/item_files/data/3gpp/ds_3gpp_mtu
/nv/item_files/modem/nr5g/RRC/cap_feature_band_nr
/nv/item_files/modem/nr5g/RRC/cap_feature_pdcp
/nv/item_files/wcdma/rrc/rrc_req_lte_for_truncated_ca
/nv/item_files/modem/nr5g/rrc/nrsa_whitelist_ca_combos
/nv/item_files/modem/mav/mav_monitor_replace_nr5g_uc_with_nr_basic
/nv/item_files/modem/data/3gpp/ps/uw_allow_abnormal_default
/nv/item_files/modem/mav/mav_monitor_mm_mb_replace_nr5g_with_nr5guwb
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_f_band_combos
/nv/item_files/modem/nr5g/RRC/cap_control_t_plus_f_band_combos
/nv/item_files/modem/mmode/nr5g_emc_support
/nv/item_files/modem/nas/mt_detach_abnormal_handling
/nv/item_files/modem/mav/mav_avoid_pco_for_aging
/nv/item_files/modem/mav/mav_ignore_n77_mm_coverage_exit_check
/nv/item_files/modem/mav/mav_ignore_high_bw_check
/nv/item_files/modem/mav/mav_ignore_cell_change_check
/nv/item_files/modem/nr5g/rrc/endc_blacklist_specific_lte_bands
/nv/item_files/modem/nr5g/RRC/band_priority_list
/nv/item_files/modem/nr5g/RRC/cap_feature_phy
/nv/item_files/modem/nas/ehplmn_nv_new
/nv/item_files/modem/mav/sdm_nsa_icon_override
/policyman/5g_plus_5g_always.xml
/policyman/5g_sa_allowed_on_ndds.xml
/nv/item_files/modem/mav/enable_bwp_switching_screen_lock
/nv/item_files/modem/nr5g/RRC/cap_trigger_rcu_empty_active_combo
/nv/item_files/mav/is_bootstrap_profile
/nv/item_files/modem/mav/cdm_feature_enable_status
/nv/item_files/modem/mmode/lte_bandpref_extn_65_256
/policyman/private_mcc_handling
/nv/item_files/modem/nas/nr_disable_duration
/nv/item_files/modem/nr5g/RRC/cap_feature_general_params
/nv/item_files/modem/nr5g/RRC/cap_srs_carrier_switch_per_plmn_control_v2
/nv/item_files/modem/nr5g/RRC/cap_feature_meas_and_mobs
/nv/item_files/modem/nas/mm5g_eps_mobility_ra_cap_update
/nv/item_files/wcdma/rrc/rrc_pseudo_meas_info
/nv/item_files/modem/nr5g/RRC/cap_feature_per_features_set_params
/nv/item_files/modem/mmode/mav_unblock_nr_fplmn
/nv/item_files/modem/mav/sa_depri_td_bwp_thresh_val
/nv/item_files/modem/nr5g/RRC/nr5g_3gpp_release_ver
/nv/item_files/modem/lte/rrc/efs/lte_3gpp_release_ver
/nv/item_files/modem/nas/iplmn_preferred
/nv/item_files/modem/mav/prune_fr1_fr2_due_to_volte_enable
/nv/item_files/modem/mav/drs_enable
/nv/item_files/modem/mav/drs_starting_rat
/nv/item_files/modem/mav/drs_dl_enabled_no_locdb
/nv/item_files/modem/mav/drs_ul_check_enabled
/nv/item_files/modem/mav/dl_bin_config
/nv/item_files/modem/mav/drs_sa_penetrate_cov_area_config
/nv/item_files/modem/mav/drs_sa_cov_band_area_config
/nv/item_files/modem/mav/drs_bw_threshold
/nv/item_files/modem/mav/drs_nsa_icon_via_motion
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_3x_f_plus_t_band_combos
/nv/item_files/modem/nr5g/RRC/cap_control_dl_256qam
/nv/item_files/modem/nr5g/RRC/cap_control_4cc_ulca_fr2
/nv/item_files/modem/mmode/nrdc_mode
/nv/item_files/modem/mav/uwb_nr_band_bw
/nv/item_files/modem/mav/enable_fr1_scell_vrlf
/nv/item_files/modem/mav/mav_sa_coverage_band_list
/nv/item_files/modem/nas/nr_t3517_config
/nv/item_files/modem/nr5g/RRC/failure_mgr_efs_nrdc_list_cfg
/nv/item_files/modem/lte/rrc/efs/eps_fallback_control
/nv/item_files/modem/mmode/nr5g_plmn_blocking_timer
/nv/item_files/modem/mav/drs_enable_tau_rej_opt
/nv/item_files/modem/mav/bwp_switch_tmr_val
/nv/item_files/modem/mav/bwp_switch_tmr_val_sl
/nv/item_files/modem/nas/pri_fplmn_ext
/nv/item_files/modem/nas/mav_dicr
/nv/item_files/modem/mav/enable_fblte_based_bwp_config
/nv/item_files/modem/mav/skip_cap_prune
/nv/item_files/modem/mav/mav_rlgs_nr5g_config_burst_len
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_4x_f_plus_t_band_combos
/nv/item_files/modem/nr5g/RRC/cap_swul_control
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_3x_t_plus_t_band_combos
/nv/item_files/modem/nr5g/RRC/cap_msg_segmentation
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_2x_f_plus_t_band_combos
/nv/item_files/modem/nr5g/RRC/cap_feature_mac
/nv/item_files/modem/mav/enable_rlgs_fr2
/nv/item_files/modem/mav/mav_dmc_enabled
/nv/item_files/modem/mav/5g_allowed_ndds
/nv/item_files/modem/mav/5g_plus_5g_always
/nv/item_files/modem/nas/mav_epplmn
/nv/item_files/modem/mav/rrc_ver_dg_enable_lte_ref_sig
/nv/item_files/modem/mav/enable_dyn_sa
/nv/item_files/modem/mav/enable_dyn_vonr
/nv/item_files/modem/mav/vzw_pco_check
/nv/item_files/modem/mav/mav_dmc_disabled
/nv/item_files/modem/mmode/mav_rat_no_srv_update_hold_timer
/nv/item_files/modem/mmode/max_ims_reg_attempt_timer
/nv/item_files/modem/nr5g/RRC/cap_control_simul_rx_tx_inter_band_pair
/nv/item_files/modem/lte/ML1/tdd_over_fdd_opt
/nv/item_files/modem/nas/unblock_plmn_without_voice
/nv/item_files/modem/mav/mav_skip_sms_only_ims_pref_ind_on_sa
/nv/item_files/modem/lte/ML1/ard_config
/nv/item_files/modem/lte/ML1/traffic_forced_r1
/nv/item_files/modem/mav/disable_sa_icon_based_on_l2nr_mr
/nv/item_files/modem/mav/disable_sdm_nw_slicing
/nv/item_files/modem/mav/disable_sa_icon_based_on_idle_l2nr_meas
/nv/item_files/modem/nr5g/ML1/srch_conn_ttt_short
/nv/item_files/modem/nas/mav_nr_in_roam_reject_smc_null_ciphering
/nv/item_files/modem/mav/enable_sa_roaming
/nv/item_files/modem/mav/disable_sa_icon_based_on_restrict_dcnr
/nv/item_files/modem/mav/mav_disable_sa_no_ciph
/nv/item_files/modem/mmode/mav_sa_only_carrier
/nv/item_files/modem/nas/mav_pssi_reg_gfnh_allowed_plmn_per_carrier
/nv/item_files/modem/mav/rel_pref_config
/nv/item_files/modem/lte/ML1/num_enb_tx_ant
/nv/item_files/modem/mav/enable_ds_mitigation
/nv/item_files/modem/nas/disable_sensitive_information
/nv/item_files/gps/cgps/sm/gnss_text_to_emergency_window
/nv/item_files/modem/mav/enable_ds_mit_for_marginal_coverage
/nv/item_files/modem/mmode/sd/mav_sd_emerg_call_allow_lmtd_srv
/nv/item_files/modem/mav/mav_monitor_3cc_check_for_5gA
/nv/item_files/modem/mav/mav_monitor_nr5g_5gA_agg_bw_thrshld
/nv/item_files/modem/nas/mav_pssi_reg_gfnh_allowed_frequencies_per_carrier
Unidentified fields (1)
TagnlenValueNote
9fa71012b200 (178)small binary blob that precedes the NV item list
Modem defaults

From the iOS 27.0.1 Qualcomm X75 · Mav24 package, before this bundle's .der.pri.

Band combos

TMO MVNO on 310-160 310-200 310-210 310-220 310-230 310-240 310-250 310-260 310-270 310-310 310-490 310-660 310-800 311-660 311-882
PlatformsCombosEN-DCNRLTENR-DCMax CCNR bandsLTE anchors
P1P4P5P6P7 30279223055n25 n41 n66 n71 n77
FR2 n258 n260 n261		B2 B12 B48 B66 B71

1 more XML values set paths the package leaves unset.

782 carriers, 225 countries · iOS 27.0.1 (24A446) · beta iOS 27.2 beta 2 (24B5089g) GitHub Ready