carrier-explode iOS carrier and country bundles GitHub
iPhone Apple Watch
TMobile_US
Phone

overrides_V53_V54_V57.der.pri Modem package.

Header
PRI Revision5.0.162
Baseband overrides (78)
SettingValue
APM ruleslikely
Attach PDN Manager rules (which PDN is required for attach)
/data/ds_dsd_apm_rules.txt
"APN_String:fast.t-mobile.com; ATTACH_TYPE_RULES:TRUE; P-CSCFRequired:4; IPAddressRequired:5; DNSAddressRequired:4; P-CSCF_OR_DNSAddressRequired:4; ON_DEMAND_TYPE_RULES:TRUE; P-CSCFRequired:4; IPAddressRequired:5; DNSAddressRequired:4; P-CSCF_OR_DNSAddressRequired:4; "
Carrier policylikely
PolicyMan rules keyed on MCC/PLMN: RAT capability, RF bands, UE mode
/policyman/carrier_policy.xml
3GPP data dynamic configlikely
Per-PLMN data rules, domestic/international roaming PLMN lists
/data/3gpp/data_3gpp_dynamic_config.xml
hplmn_rat_order_ctrlunverified
NAS setting: NAS mobility management / PLMN selection
/nv/item_files/modem/nas/hplmn_rat_order_ctrl
2
mav_pssi_reg_unblock_hplmn_max_reg_failurelikely
PSSI registration rule: Apple PLMN search / system-selection (PSSI) registration tuning
/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_max_reg_failure
1
mav_pssi_reg_unblock_hplmn_voice_not_avail_based_on_motion_stlikely
PSSI registration rule: Apple PLMN search / system-selection (PSSI) registration tuning
/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_voice_not_avail_based_on_motion_st
1
HPLMN RAT orderlikely
Home-PLMN RAT search order: uint16 count, then sys_sys_mode RATs
/nv/item_files/modem/nas/hplmn_rat_order
NR > LTE > WCDMA > GSM
IMS enable
Enables the IMS task (VoLTE, VoWiFi, SMS over IMS)
/nv/item_files/ims/IMS_enable
2
IMS media service configunverified
IMS media (codec/RTP) service config; no public schema
/nv/item_files/ims/media_service_config
SMS domain preference listunverified
Per-RAT/PLMN SMS domain list; layout not public
/nv/item_files/modem/mmode/sms_domain_pref_list
Block SMS-PP envelopelikely
Block SIM Toolkit SMS-PP (data download) envelopes, per subscription
/nv/item_files/modem/qmi/cat/qmi_cat_block_sms_pp_env_per_sub
0= Off
SMS domain preference
SMS over IMS preference
/nv/item_files/modem/mmode/sms_domain_pref
1= PS (IMS) SMS preferred
LTE feature disablelikely
LTE RRC capability feature-disable bitmap
/nv/item_files/modem/lte/rrc/efs/lte_feature_disable
enable_ds_mit_for_marginal_coveragelikely
Data-stall mitigation: Detects stalled data sessions and backs off NR / SA to recover
/nv/item_files/modem/mav/enable_ds_mit_for_marginal_coverage
1
LTE feature enablelikely
LTE RRC capability feature-enable bitmap; bit list unpublished
/nv/item_files/modem/lte/rrc/efs/lte_feature_enable
LTE band priority listlikely
Prioritised band list for LFS/FFS scans (uint16 array)
/nv/item_files/modem/lte/rrc/efs/band_priority_list_v2
PC2 whitelistunverified
Bands allowed Power Class 2 (26 dBm)
/nv/item_files/modem/lte/rrc/PC2_WHITELIST.xml
max_lte_cap_sizeunverified
LTE setting: LTE RRC / L1 / L2
/nv/item_files/modem/lte/rrc/cap/max_lte_cap_size
7000
Fake eNodeB mitigationlikely
LTE false-base-station (fake eNodeB) mitigation
/nv/item_files/modem/lte/rrc/bbq/bbq_mitigation
1= On
whitelist_ca_comboslikely
CA combo list: LTE CA / EN-DC band-combination allow/deny list
/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos
LTE CA combos per PLMNlikely
Prune the advertised LTE CA combos per PLMN from /policyman/band_combos_per_plmn.xml
/nv/item_files/modem/mav/lte_ca_xml_generation
1= On
blacklist_ca_comboslikely
CA combo list: LTE CA / EN-DC band-combination allow/deny list
/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos
whitelist_ca_combos_with_laalikely
CA combo list: LTE CA / EN-DC band-combination allow/deny list
/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_laa
Satellite EARFCNs per carrierlikely
LTE channels the carrier's satellite (GFNH) service may register on, per PLMN
/nv/item_files/modem/nas/mav_pssi_reg_gfnh_allowed_frequencies_per_carrier
mav_pssi_reg_gfnh_allowed_plmn_per_carrierunverified
Satellite PLMN rule: Apple satellite (GFNH) PLMN / geofence rule
/nv/item_files/modem/nas/mav_pssi_reg_gfnh_allowed_plmn_per_carrier
2336255621264837120x0001000136013e03
SRVCC support
SRVCC capability indication from E-UTRAN to UTRAN (TS 23.216)
/nv/item_files/modem/nas/nas_srvcc_support
1= On
Voice domain preference
E-UTRAN voice domain (TS 24.301 9.9.3.44)
/nv/item_files/modem/mmode/voice_domain_pref
3= IMS PS voice preferred
drs_ul_check_enabledlikely
Dynamic RAT selection: Apple Dynamic RAT Selection (DRS): picks LTE, NSA or SA from measured throughput
/nv/item_files/modem/mav/drs_ul_check_enabled
1
drs_enablelikely
Dynamic RAT selection: Apple Dynamic RAT Selection (DRS): picks LTE, NSA or SA from measured throughput
/nv/item_files/modem/mav/drs_enable
1
drs_nsa_icon_via_motionlikely
Dynamic RAT selection: Apple Dynamic RAT Selection (DRS): picks LTE, NSA or SA from measured throughput
/nv/item_files/modem/mav/drs_nsa_icon_via_motion
1
drs_sa_cov_band_area_configlikely
Dynamic RAT selection: Apple Dynamic RAT Selection (DRS): picks LTE, NSA or SA from measured throughput
/nv/item_files/modem/mav/drs_sa_cov_band_area_config
drs_starting_ratlikely
Dynamic RAT selection: Apple Dynamic RAT Selection (DRS): picks LTE, NSA or SA from measured throughput
/nv/item_files/modem/mav/drs_starting_rat
2
No mmWave for FaceTime videolikely
Drop mmWave (FR2) during FaceTime video calls
/nv/item_files/modem/mav/disable_mmw_for_ftv
1= On
disable_sa_deprio_on_wifi_assistlikely
Smart data mode: Apple SDM: turns NR / SA off or deprioritises SA when it does not pay off
/nv/item_files/modem/mav/disable_sa_deprio_on_wifi_assist
1
Disable SA on null SUCIlikely
Turn off 5G SA when the SUCI uses the null protection scheme (SUPI sent unconcealed)
/nv/item_files/modem/mav/mav_disable_sa_if_null_suci
1= On
Drop EN-DC in call hysteresislikely
Hysteresis timer before dropping EN-DC during a call
/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_val
15
Drop EN-DC in VoLTE hysteresislikely
Hysteresis timer before dropping EN-DC during a VoLTE call
/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_volte_val
15
cap_control_max_aggrlikely
NR UE capability: NR RRC UE-capability toggle
/nv/item_files/modem/nr5g/RRC/cap_control_max_aggr
1
BWP switch on screen locklikely
Move to a narrower NR bandwidth part while the screen is locked
/nv/item_files/modem/mav/enable_bwp_switching_screen_lock
1= On
Dynamic SAlikely
Turn 5G SA capability on and off with coverage (dyn_sa_* / dyn_cap_* timers and thresholds)
/nv/item_files/modem/mav/enable_dyn_sa
1= On
Dynamic VoNRlikely
Turn VoNR on and off dynamically, alongside dynamic SA
/nv/item_files/modem/mav/enable_dyn_vonr
1= On
enable_fblte_based_bwp_configunverified
Apple modem option: Apple-only (Maverick) modem option; undocumented
/nv/item_files/modem/mav/enable_fblte_based_bwp_config
1
enable_fr1_scell_vrlfunverified
Apple modem option: Apple-only (Maverick) modem option; undocumented
/nv/item_files/modem/mav/enable_fr1_scell_vrlf
1
cap_control_higher_pow_lmtlikely
NR UE capability: NR RRC UE-capability toggle
/nv/item_files/modem/nr5g/RRC/cap_control_higher_pow_lmt
1
mav_monitor_replace_nr5g_uc_with_nr_basiclikely
5G icon rule: Status-bar 5G / 5G UW / 5G UC / 5G+ icon override logic
/nv/item_files/modem/mav/mav_monitor_replace_nr5g_uc_with_nr_basic
1
cap_srs_tx_switch_impact_to_rx_controllikely
NR UE capability: NR RRC UE-capability toggle
/nv/item_files/modem/nr5g/RRC/cap_srs_tx_switch_impact_to_rx_control
1
enable_tdd_ulca_based_ul_drs_backoffunverified
Apple modem option: Apple-only (Maverick) modem option; undocumented
/nv/item_files/modem/mav/enable_tdd_ulca_based_ul_drs_backoff
1
SA coverage bandslikely
NR bands that count as 5G SA coverage (uint8 band numbers, zero-padded)
/nv/item_files/modem/mav/mav_sa_coverage_band_list
"G"
sa_depri_td_bwp_thresh_vallikely
Smart data mode: Apple SDM: turns NR / SA off or deprioritises SA when it does not pay off
/nv/item_files/modem/mav/sa_depri_td_bwp_thresh_val
30
mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdbunverified
Apple modem option: Apple-only (Maverick) modem option; undocumented
/nv/item_files/modem/nas/mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdb
4
cap_control_nrca_f_plus_f_ulca_band_comboslikely
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_f_ulca_band_combos
257
NR band capabilitylikely
NR band feature-capability list; proprietary layout
/nv/item_files/modem/nr5g/RRC/cap_feature_band_nr
cap_add_bwlikely
NR UE capability: NR RRC UE-capability toggle
/nv/item_files/modem/nr5g/RRC/cap_add_bw
cap_csi_rs_32_port_controllikely
NR UE capability: NR RRC UE-capability toggle
/nv/item_files/modem/nr5g/RRC/cap_csi_rs_32_port_control
NR5G emergency supportunverified
NR5G emergency-call support
/nv/item_files/modem/mmode/nr5g_emc_support
1= On
cap_feature_phy_v2likely
NR UE capability: NR RRC UE-capability toggle
/nv/item_files/modem/nr5g/RRC/cap_feature_phy_v2
cap_control_nrca_2x_f_plus_t_band_comboslikely
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_2x_f_plus_t_band_combos
1
cap_control_nrca_3x_f_plus_t_band_comboslikely
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_3x_f_plus_t_band_combos
11038234380810x010101010101
cap_control_nrca_3x_f_plus_t_band_combos_v2likely
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_3x_f_plus_t_band_combos_v2
cap_control_nrca_3x_t_plus_t_band_comboslikely
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_3x_t_plus_t_band_combos
1
cap_swul_3x_controllikely
NR UE capability: NR RRC UE-capability toggle
/nv/item_files/modem/nr5g/RRC/cap_swul_3x_control
1
cap_control_nrca_4x_fdd_band_comboslikely
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_4x_fdd_band_combos
257
cap_control_nrca_4x_f_plus_t_band_comboslikely
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_4x_f_plus_t_band_combos
65793
cap_control_nrca_4x_f_plus_t_band_combos_v2likely
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_4x_f_plus_t_band_combos_v2
cap_swul_4x_controllikely
NR UE capability: NR RRC UE-capability toggle
/nv/item_files/modem/nr5g/RRC/cap_swul_4x_control
1
cap_control_nrca_5x_f_plus_t_band_comboslikely
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_5x_f_plus_t_band_combos
657930x010101000000
cap_control_nrca_5x_f_plus_t_band_combos_v2likely
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_5x_f_plus_t_band_combos_v2
cap_swul_5x_controllikely
NR UE capability: NR RRC UE-capability toggle
/nv/item_files/modem/nr5g/RRC/cap_swul_5x_control
1
cap_control_nrca_6x_f_plus_t_band_combos_v2likely
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_6x_f_plus_t_band_combos_v2
cap_control_nrca_f_plus_f_band_comboslikely
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_f_band_combos
257
cap_control_nrca_f_plus_t_band_comboslikely
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_t_band_combos
1
NR TDD+FDD combo controllikely
Enables NR-CA/NR-DC TDD+FDD band-combo classes
/nv/item_files/modem/nr5g/RRC/cap_control_t_plus_f_band_combos
7
cap_control_nrca_t_plus_t_band_comboslikely
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_t_plus_t_band_combos
65793
cap_swul_controllikely
NR UE capability: NR RRC UE-capability toggle
/nv/item_files/modem/nr5g/RRC/cap_swul_control
1
sa_depri_bw_vallikely
Smart data mode: Apple SDM: turns NR / SA off or deprioritises SA when it does not pay off
/nv/item_files/modem/mav/sa_depri_bw_val
4
EPS fallback controlunverified
VoNR to EPS fallback control
/nv/item_files/modem/lte/rrc/efs/eps_fallback_control
171884591485920x30750000a20f0000
NR5G disable modeunverified
Disables NR5G SA and/or NSA
/nv/item_files/modem/mmode/nr5g_disable_mode
0= NR5G enabled
3gpp_rel_versionlikely
3GPP release: Signalled 3GPP release
/nv/item_files/modem/data/3gpp/ps/3gpp_rel_version
5
Legacy NV values (3)
NVItemValue
62005PRI revision
Packed PRI Revision header
10616837= 5.0.1620x0500a200
1920AAGPS Positioning Modes Supportedlikely 1065
62025Delay RAU during CSFB (probable)unverified 0= Off
Carrier Configuration Management feature groups

25 one-byte flags per group. No source names them; under each set flag is which carriers set it, and what the modem does with it where its code shows. The EVDO, UIM and OMA groups are obsolete in the iPhone 17 modem.

GroupFlags
Call Manager Feature Group
NV 62012, 1 of 25 set
0123456789101112131415161718192021222324
20: Set for every iPhone from iPhone 14, and on older iPhones only by carriers that have shut down 3G; likely the newer form of flag 14
Feature Group (unnamed, tag 9f83e453)unverified
NV 62035, 1 of 25 set
0123456789101112131415161718192021222324
2: Set only by T-Mobile US
Legacy NV item list (35)

Green ones have a value above.

3533SMS MO Retry Interval401GPSOne PDE TCP Address426GPSOne PDE Port4960HS Based Plus Dial Setting3446TRM Configuration553GSM A5 Algorithms Supported4432GPRS GEA Algorithms Supported4118HSDPA Category4210WCDMA HSUPA Category62011System Determination Feature Group62012Call Manager Feature Group62013Wireless Messaging Feature Group62014Data Service Feature Group442Roaming Preference58021NV 580211920AAGPS Positioning Modes Supported4265VOIP Registration Mode6850UMTS AMR Codec Preference Config1907Authentication Require Password Encryption62026NV 620265895MGRF Supported852APN Name5280Disable CM Call Type946Band preference bits 16-312954Bits 32 To 63 Of Band Pref3461ENS Enabled62025Delay RAU during CSFB (probable)62023NV 620234703CGPS UMTS PDE Server Address URL6792GNSS SUPL Version3758AAGPS Use Transport Security909GSM/UMTS SMS Bearer Preference62005PRI revision62035Feature Group (unnamed, tag 9f83e453)855RTRE Configuration
NV path schema index (357 paths, MAVZ) 
/nv/item_files/modem/nas/lte_nas_temp_fplmn_backoff_time
/nv/item_files/ims/IMS_enable
/nv/item_files/modem/mmode/ue_usage_setting
/nv/item_files/modem/mmode/voice_domain_pref
/nv/item_files/modem/mmode/lte_disable_duration
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r8
/nv/item_files/modem/data/epc/qmi_qos
/nv/item_files/wcdma/rrc/wcdma_rrc_fast_return_to_lte_after_csfb
/nv/item_files/modem/data/3gpp/lteps/auto_connect_def_pdn
/nv/item_files/modem/mmode/lte_bandpref
/nv/item_files/modem/mmode/sms_mandatory
/nv/item_files/modem/data/3gpp/umts_nw_initiated_qos_support
/nv/item_files/modem/nas/nas_lai_change_force_lau_for_emergency
/nv/item_files/modem/data/3gpp/ps/3gpp_rel_version
/nv/item_files/modem/data/3gpp/ps/ser_req_throttle_behavior
/nv/item_files/modem/nas/hplmn_rat_order
/nv/item_files/modem/mmode/sms_only
/nv/item_files/modem/geran/grr/g2l_blind_redir_after_csfb_control
/nv/item_files/modem/mmode/sms_domain_pref
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r9
/nv/item_files/wcdma/rrc/wcdma_ppac_support
/nv/item_files/wcdma/rrc/wcdma_rrc_feature
/nv/item_files/wcdma/rrc/wcdma_rrc_wtol_ps_ho_support
/nv/item_files/modem/data/3gpp/ps/allow_infinite_throt
/nv/item_files/modem/nas/cm_efs_mav_health_monitor_control_pri
/nv/item_files/modem/nas/nas_srvcc_support
/nv/item_files/modem/sms/pri_disable_cb_dup_detection
/nv/item_files/modem/lte/ML1/cdrx_opt_info
/nv/item_files/modem/nas/ignore_uplmn
/nv/item_files/wcdma/rrc/wcdma_rrc_csfb_skip_sib11_opt
/nv/item_files/modem/nas/csg_support_configuration
/nv/item_files/modem/nas/iPLMN
/nv/item_files/modem/nas/max_validate_sim_counter
/nv/item_files/modem/nas/irat_search_timer
/nv/item_files/modem/mmode/sms_domain_pref_list
/nv/item_files/modem/mmode/qmi/mav_pri_allow_auto_answer
/ds/atcop/atcop_cops_auto_mode.txt
/nv/item_files/modem/uim/mmgsdi/refresh_retry
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r10
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r8_tdd
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r9_tdd
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r10_tdd
/nv/item_files/modem/lte_connection_control
/nv/item_files/modem/lte/rrc/cap/prune_ca_combos
/nv/item_files/modem/lte/rrc/efs/lte_conn_ctrl_barring_optimz_params
/nv/item_files/modem/data/3gpp/call_orig_allowed_before_ps_attach
/nv/item_files/wcdma/rrc/wcdma_rrc_wtol_tdd_ps_ho_support
/nv/item_files/modem/sms/mmgsdi_refresh_vote_ok
/nv/item_files/modem/uim/gstk/default_apn
/nv/item_files/modem/mmode/buffer_ims_pref_change_timer
/nv/item_files/data/3gpp/rpm_params
/nv/item_files/data/3gpp/rpm_suppported_sim
/nv/item_files/modem/geran/grr/g2l_blind_redir_after_srvcc_control
/nv/item_files/modem/data/epc/pdn_throttling_config.txt
/policyman/carrier_policy.xml
/mav/mav_police_pri_mode_pref_mask
/nv/item_files/modem/uim/mmgsdi/ens_slot_enabled
/nv/item_files/modem/nas/pri_fplmn
/nv/item_files/modem/nas/lte_nas_ignore_mt_csfb_during_volte_call
/nv/item_files/modem/data/3gpp/ps/rel_10_throttling
/nv/item_files/modem/lte/L2/mac/lte_mac_enable_aas
/nv/item_files/modem/nas/mav_rat_upgrade_from_pri
/data/ds_dsd_apm_rules.txt
/nv/item_files/modem/data/3gpp/ps/rel_10_throttling_per_plmn
/nv/item_files/modem/nas/mav_hpplmn_scan_throttler/config_params
/nv/item_files/modem/data/3gpp/lteps/allow_def_lte_pdn_teardown
/nv/item_files/modem/nas/eplmn_cell_reselect
/nv/item_files/modem/nas/hplmn_rat_order_ctrl
/data/3gpp/throttling/srv_req_throt_config.txt
/nv/item_files/wcdma/rrc/rrc_fe_fach_support
/nv/item_files/modem/nas/nas_config_feature
/nv/item_files/modem/lte/rrc/efs/ho_neigh_cell_si_acq_params
/nv/item_files/modem/lte/rrc/efs/lte_spec_feature_r11
/nv/item_files/modem/lte/rrc/efs/lte_spec_feature_r11_tdd
/nv/item_files/modem/qmi/mav_fws_gsm_key_signature_bitmask
/nv/item_files/modem/mmode/lte_rpm_info_2
/nv/item_files/modem/nas/dos_mitigation_feature_config
/nv/item_files/modem/lte/rrc/efs/lte_feature_enable
/nv/item_files/modem/lte/rrc/efs/lte_feature_disable
/nv/item_files/modem/mmode/mode_pref
/nv/item_files/modem/lte/rrc/efs/lte_rrc_sub_feature_enable
/nv/item_files/modem/lte/rrc/efs/lte_rrc_sub_feature_disable
/nv/item_files/modem/lte/rrc/efs/cell_depriority_params
/nv/item_files/modem/lte/rrc/efs/conn_rej_cell_depriority_params
/nv/item_files/modem/lte/rrc/efs/c2k_rx_config
/nv/item_files/modem/mmode/follow_tot
/nv/item_files/modem/nr5g/RRC/cep_conn_est_fail_ctrl
/nv/item_files/modem/mmode/nr5g_disable_mode
/nv/item_files/modem/uim/mmgsdi/slot_features_status_list__mav_override
/nv/item_files/modem/uim/mmgsdi/override_opl_pnn_lookup_for_non_rplmn
/nv/item_files/modem/uim/uimdrv/nv_pdown_uim_consecutive_techproblems
/nv/item_files/modem/qmi/cat/qmi_cat_block_sms_pp_env_per_sub
/nv/item_files/modem/lte/rrc/cap/max_ca_combos
/nv/item_files/modem/mmode/nr_band_pref
/nv/item_files/modem/lte/rrc/mav_rrc_reject_supported
/nv/item_files/modem/nr5g/RRC/cap_add_bw
/nv/item_files/ims/media_service_config
/nv/item_files/modem/nas/mav_sa_lte_prio_sub_band_per_plmn
/nv/item_files/modem/nas/mav_nr_prio_sub_band_per_plmn
/nv/item_files/modem/nas/mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdb
/nv/item_files/modem/nas/mav_lte_steady_camp_duration
/nv/item_files/modem/nas/mav_interlace_scan_init_timer
/nv/item_files/modem/uim/gstk/feature_bmask__mav_override
/nv/item_files/modem/mmode/nr_nsa_band_pref
/nv/item_files/modem/lte/rrc/efs/csg_control_v2
/nv/item_files/modem/mav/disable_sdm
/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_val
/nv/item_files/modem/lte/rrc/efs/disable_4l_per_band
/nv/item_files/modem/mav/lte_ca_xml_generation
/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos
/nv/item_files/modem/lte/rrc/cap/blacklist_explicit_ca_combos
/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_ulca
/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_laa
/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos_with_nc_combos
/nv/item_files/modem/mav/endc_ca_file_generation
/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos_with_ulca
/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos_with_laa
/nv/item_files/modem/nr5g/rrc/endc_blacklist_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_blacklist_explicit_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_lte_fr1_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_fr1_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_lte_fr2_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_fr2_ca_combos
/nv/item_files/modem/nas/tdscdma_op_plmn_list
/nv/item_files/modem/lte/rrc/cap/max_lte_cap_size
/nv/item_files/modem/lte/rrc/cap/max_nr_cap_size
/nv/item_files/modem/lte/rrc/cap/max_lte_nr_cap_size
/nv/item_files/modem/nr5g/RRC/cap_disable_ul_256qam
/nv/item_files/modem/data/3gpp/ps/ran_bit_rate_support
/nv/item_files/modem/nas/mav_nr_predef_narfcn
/nv/item_files/modem/nas/isr
/nv/item_files/modem/uim/gstk/feature_bmask_2__mav_override
/nv/item_files/modem/mmode/ssac_hvolte
/nv/item_files/modem/lte/rrc/efs/dsds_timers
/nv/item_files/modem/uim/uimdrv/mav_uim_wakeup_poll_timer_config
/nv/item_files/modem/lte/rrc/efs/band_priority_list_v2
/nv/item_files/modem/data/3gpp/ps/apn_reject/apn_reject_name.txt
/nv/item_files/modem/nr5g/rrc/endc_disable_specific_ul_bands
/nv/item_files/modem/lte/rrc/PC2_WHITELIST.xml
/nv/item_files/modem/lte/rrc/bbq/bbq_mitigation
/nv/item_files/modem/mmode/ims_reg_status_wait_timer
/nv/item_files/modem/lte/rrc/efs/lte_connection_ctrl_params
/nv/item_files/modem/mmode/scan_scope_rule
/nv/item_files/modem/data/dsmgr/pdu_session_id_inclusion
/nv/reg_files/modem/lte/rrc/csp/pref_freq_list
/nv/item_files/modem/mav/local_crp_hysteresis_tmr_val
/nv/item_files/modem/uim/gstk/mav_svc_notification_to_card_upon_restricted_mode_exit_latency_config
/nv/item_files/modem/nas/is_eps_rplmn_from_sim_needed
/nv/item_files/modem/nr5g/RRC/cre_thermal_ota_cause
/nv/item_files/modem/lte/rrc/efs/data_inactivity_control
/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_volte_val
/nv/item_files/modem/lte/ML1/fr2_priority_optimization
/nv/item_files/modem/mav/volte_screen_on_hysteresis_tmr_val
/nv/item_files/modem/nas/skip_acb_check_drb_est_ims_registration
/nv/item_files/modem/mav/mav_monitor_enable_nr5g_uwb_based_on_motion_state_no_uli_case
/nv/item_files/modem/nas/is_x_to_nr_enabled
/nv/item_files/modem/nr5g/RRC/meas_pruning
/nv/item_files/modem/mav/disable_mmw_for_ftv
/nv/item_files/modem/mav/disable_fr1_for_lpm
/nv/item_files/modem/data/3gpp/ps/set_volte_call_type
/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_max_reg_failure
/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_voice_not_avail_based_on_motion_st
/nv/item_files/modem/mav/mav_monitor_enable_nr5g_uwb_based_on_motion_state
/nv/item_files/modem/nas/mav_pssi_reg_follow_rplmn_rat_order_power_up
/nv/item_files/modem/nr5g/RRC/cap_per_plmn_limit_bw
/policyman/5g_roaming_feature_enabled.xml
/nv/item_files/modem/nas/lte_fast_cfl_search_timer
/nv/item_files/modem/nr5g/rrc/endc_blacklist_fr1_fdd_tdd_ca_combos
/nv/item_files/modem/nr5g/RRC/cap_srs_tx_switch_control
/data/3gpp/data_3gpp_dynamic_config.xml
/nv/item_files/modem/nr5g/RRC/cap_csi_rs_32_port_control
/nv/item_files/modem/lte/rrc/efs/hst_scan_params
/nv/item_files/modem/data/3gpp/reset_non_spec_throttle_with_reattach_required
/nv/item_files/modem/nas/mav_lte_reject_smc_null_ciphering
/nv/item_files/modem/nas/mav_nr_reject_smc_null_ciphering
/nv/item_files/modem/mmode/sd/mav_oos_search_rbs_n_dbs
/nv/item_files/modem/nr5g/rrc/nrsa_blacklist_ca_combos
/nv/item_files/modem/nr5g/rrc/nrsa_blacklist_explicit_ca_combos
/nv/item_files/modem/nr5g/rrc/nrsa_reduced_cc_fr1_ca_combos
/nv/item_files/modem/nr5g/rrc/nrsa_blacklist_fr1_fdd_tdd_ca_combos
/nv/item_files/modem/maverick/uim/apps/card_prov_strategy
/nv/item_files/modem/mav/sa_depri_bw_val
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_t_band_combos
/nv/item_files/modem/nr5g/RRC/cap_control_mrdc_f_plus_t_band_combos
/nv/item_files/modem/mav/mav_disable_sa_if_null_suci
/nv/item_files/modem/nr5g/RRC/cap_control_mrdc_t_plus_t_band_combos
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_t_plus_t_band_combos
/nv/item_files/modem/mav/override_icon_based_on_sa_coverage
/policyman/5g_sa_roaming_feature_enabled.xml
/nv/item_files/modem/mav/cap_prune_efs_version
/nv/item_files/modem/nr5g/RRC/cap_prune
/nv/item_files/modem/nas/t3411_value_during_mmtel_call
/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos
/nv/item_files/modem/mav/mav_avoid_uwb_roaming
/nv/item_files/modem/nr5g/rrc/endc_blacklist_ca_combos_with_nc_combos
/nv/item_files/modem/nas/ehplmn_nv
/nv/item_files/modem/nas/is_ehplmn_nv_set
/nv/item_files/modem/nas/emm_nas_nv_items
/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_ims_reg_failure_timer
/nv/item_files/modem/mmode/mav_volte_disable_ims_reg_wait_timer_hplmn
/nv/item_files/modem/nas/force_esr_ndds_for_lte_only
/nv/item_files/modem/nas/force_esr_ndds_cust
/nv/item_files/modem/mmode/sd/e911_prioritize_cs
/policyman/l2nr_policy.xml
/nv/item_files/modem/uim/uimdrv/uim_check_sim_status_apm_off
/nv/item_files/modem/data/3gpp/ps/l2nr_fast_return_params
/nv/item_files/modem/data/3gpp/ps/nr5g_ran_bit_rate_support
/nv/item_files/data/3gpp/ds_3gpp_mtu
/nv/item_files/modem/nr5g/RRC/cap_feature_band_nr
/nv/item_files/modem/nr5g/RRC/cap_feature_pdcp
/nv/item_files/wcdma/rrc/rrc_req_lte_for_truncated_ca
/nv/item_files/modem/nr5g/rrc/nrsa_whitelist_ca_combos
/nv/item_files/modem/mav/mav_monitor_replace_nr5g_uc_with_nr_basic
/nv/item_files/modem/data/3gpp/ps/uw_allow_abnormal_default
/nv/item_files/modem/mav/mav_monitor_mm_mb_replace_nr5g_with_nr5guwb
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_f_band_combos
/nv/item_files/modem/nr5g/RRC/cap_control_t_plus_f_band_combos
/nv/item_files/modem/mmode/nr5g_emc_support
/nv/item_files/modem/nas/mt_detach_abnormal_handling
/nv/item_files/modem/mav/mav_avoid_pco_for_aging
/nv/item_files/modem/mav/mav_ignore_n77_mm_coverage_exit_check
/nv/item_files/modem/mav/mav_ignore_high_bw_check
/nv/item_files/modem/mav/mav_ignore_cell_change_check
/nv/item_files/modem/nr5g/rrc/endc_blacklist_specific_lte_bands
/nv/item_files/modem/nr5g/RRC/band_priority_list
/nv/item_files/modem/nr5g/RRC/cap_feature_phy
/nv/item_files/modem/nas/ehplmn_nv_new
/nv/item_files/modem/mav/sdm_nsa_icon_override
/policyman/5g_plus_5g_always.xml
/policyman/5g_sa_allowed_on_ndds.xml
/nv/item_files/modem/mav/enable_bwp_switching_screen_lock
/nv/item_files/modem/nr5g/RRC/cap_trigger_rcu_empty_active_combo
/nv/item_files/mav/is_bootstrap_profile
/nv/item_files/modem/mav/cdm_feature_enable_status
/nv/item_files/modem/mmode/lte_bandpref_extn_65_256
/policyman/private_mcc_handling
/nv/item_files/modem/nas/nr_disable_duration
/nv/item_files/modem/nr5g/RRC/cap_feature_general_params
/nv/item_files/modem/nr5g/RRC/cap_srs_carrier_switch_per_plmn_control_v2
/nv/item_files/modem/nr5g/RRC/cap_feature_meas_and_mobs
/nv/item_files/modem/nas/mm5g_eps_mobility_ra_cap_update
/nv/item_files/wcdma/rrc/rrc_pseudo_meas_info
/nv/item_files/modem/nr5g/RRC/cap_feature_per_features_set_params
/nv/item_files/modem/mmode/mav_unblock_nr_fplmn
/nv/item_files/modem/mav/sa_depri_td_bwp_thresh_val
/nv/item_files/modem/nr5g/RRC/nr5g_3gpp_release_ver
/nv/item_files/modem/lte/rrc/efs/lte_3gpp_release_ver
/nv/item_files/modem/nas/iplmn_preferred
/nv/item_files/modem/mav/prune_fr1_fr2_due_to_volte_enable
/nv/item_files/modem/mav/drs_enable
/nv/item_files/modem/mav/drs_starting_rat
/nv/item_files/modem/mav/drs_dl_enabled_no_locdb
/nv/item_files/modem/mav/drs_ul_check_enabled
/nv/item_files/modem/mav/dl_bin_config
/nv/item_files/modem/mav/drs_sa_penetrate_cov_area_config
/nv/item_files/modem/mav/drs_sa_cov_band_area_config
/nv/item_files/modem/mav/drs_bw_threshold
/nv/item_files/modem/mav/drs_nsa_icon_via_motion
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_3x_f_plus_t_band_combos
/nv/item_files/modem/nr5g/RRC/cap_control_dl_256qam
/nv/item_files/modem/nr5g/RRC/cap_control_4cc_ulca_fr2
/nv/item_files/modem/mmode/nrdc_mode
/nv/item_files/modem/mav/uwb_nr_band_bw
/nv/item_files/modem/mav/enable_fr1_scell_vrlf
/nv/item_files/modem/mav/mav_sa_coverage_band_list
/nv/item_files/modem/nas/nr_t3517_config
/nv/item_files/modem/nr5g/RRC/failure_mgr_efs_nrdc_list_cfg
/nv/item_files/modem/lte/rrc/efs/eps_fallback_control
/nv/item_files/modem/mmode/nr5g_plmn_blocking_timer
/nv/item_files/modem/mav/drs_enable_tau_rej_opt
/nv/item_files/modem/mav/bwp_switch_tmr_val
/nv/item_files/modem/mav/bwp_switch_tmr_val_sl
/nv/item_files/modem/nas/pri_fplmn_ext
/nv/item_files/modem/nas/mav_dicr
/nv/item_files/modem/mav/enable_fblte_based_bwp_config
/nv/item_files/modem/mav/skip_cap_prune
/nv/item_files/modem/mav/mav_rlgs_nr5g_config_burst_len
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_4x_f_plus_t_band_combos
/nv/item_files/modem/nr5g/RRC/cap_swul_control
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_3x_t_plus_t_band_combos
/nv/item_files/modem/nr5g/RRC/cap_msg_segmentation
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_2x_f_plus_t_band_combos
/nv/item_files/modem/nr5g/RRC/cap_feature_mac
/nv/item_files/modem/mav/enable_rlgs_fr2
/nv/item_files/modem/mav/mav_dmc_enabled
/nv/item_files/modem/mav/5g_allowed_ndds
/nv/item_files/modem/mav/5g_plus_5g_always
/nv/item_files/modem/nas/mav_epplmn
/nv/item_files/modem/mav/rrc_ver_dg_enable_lte_ref_sig
/nv/item_files/modem/mav/enable_dyn_sa
/nv/item_files/modem/mav/enable_dyn_vonr
/nv/item_files/modem/mav/vzw_pco_check
/nv/item_files/modem/mav/mav_dmc_disabled
/nv/item_files/modem/mmode/mav_rat_no_srv_update_hold_timer
/nv/item_files/modem/mmode/max_ims_reg_attempt_timer
/nv/item_files/modem/nr5g/RRC/cap_control_simul_rx_tx_inter_band_pair
/nv/item_files/modem/lte/ML1/tdd_over_fdd_opt
/nv/item_files/modem/nas/unblock_plmn_without_voice
/nv/item_files/modem/mav/mav_skip_sms_only_ims_pref_ind_on_sa
/nv/item_files/modem/lte/ML1/ard_config
/nv/item_files/modem/lte/ML1/traffic_forced_r1
/nv/item_files/modem/mav/disable_sa_icon_based_on_l2nr_mr
/nv/item_files/modem/mav/disable_sdm_nw_slicing
/nv/item_files/modem/mav/disable_sa_icon_based_on_idle_l2nr_meas
/nv/item_files/modem/nr5g/ML1/srch_conn_ttt_short
/nv/item_files/modem/nas/mav_nr_in_roam_reject_smc_null_ciphering
/nv/item_files/modem/mav/enable_sa_roaming
/nv/item_files/modem/mav/disable_sa_icon_based_on_restrict_dcnr
/nv/item_files/modem/mav/mav_disable_sa_no_ciph
/nv/item_files/modem/mmode/mav_sa_only_carrier
/nv/item_files/modem/nas/mav_pssi_reg_gfnh_allowed_plmn_per_carrier
/nv/item_files/modem/mav/rel_pref_config
/nv/item_files/modem/lte/ML1/num_enb_tx_ant
/nv/item_files/modem/mav/enable_ds_mitigation
/nv/item_files/modem/nas/disable_sensitive_information
/nv/item_files/gps/cgps/sm/gnss_text_to_emergency_window
/nv/item_files/modem/mav/enable_ds_mit_for_marginal_coverage
/nv/item_files/modem/mmode/sd/mav_sd_emerg_call_allow_lmtd_srv
/nv/item_files/modem/mav/mav_monitor_3cc_check_for_5gA
/nv/item_files/modem/mav/mav_monitor_nr5g_5gA_agg_bw_thrshld
/nv/item_files/modem/nas/mav_pssi_reg_gfnh_allowed_frequencies_per_carrier
/nv/item_files/modem/mav/disable_sa_deprio_on_wifi_assist
/nv/item_files/modem/nr5g/RRC/cap_control_max_aggr
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_4x_fdd_band_combos
/nv/item_files/modem/nr5g/RRC/cap_control_mrdc_2x_f_plus_f_band_combos
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_5x_f_plus_t_band_combos
/nv/item_files/modem/nr5g/RRC/cap_control_nrdc_2tdd_plus_fr2_band_combos
/nv/item_files/modem/nr5g/RRC/cap_control_nrdc_2fdd_plus_fr2_band_combos
/nv/item_files/modem/nr5g/RRC/cap_control_nrdc_2x_f_plus_t_plus_fr2_band_combos
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_4x_f_plus_t_band_combos_v2
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_5x_f_plus_t_band_combos_v2
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_6x_f_plus_t_band_combos_v2
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_f_ulca_band_combos
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_3x_f_plus_t_band_combos_v2
/nv/item_files/modem/nr5g/RRC/cap_srs_tx_switch_impact_to_rx_control
/nv/item_files/modem/nr5g/RRC/cap_swul_3x_control
/nv/item_files/modem/nr5g/RRC/cap_swul_4x_control
/nv/item_files/modem/nr5g/RRC/cap_swul_5x_control
/nv/item_files/modem/nr5g/RRC/cap_control_higher_pow_lmt
/nv/item_files/modem/uim/mmgsdi/invalidate_nitz
/nv/item_files/modem/nr5g/RRC/cap_srs_cs_3dlca_control
/nv/item_files/modem/nr5g/RRC/cap_feature_band_nr_v2
/nv/item_files/modem/nr5g/RRC/cap_control_nrca_3x_tdd_band_combos_msim_v2
/nv/item_files/modem/nr5g/RRC/cap_feature_phy_v2
/nv/item_files/modem/nr5g/RRC/cap_srs_cs_3dlca_msim_control
/nv/item_files/modem/mav/enable_tdd_ulca_based_ul_drs_backoff
/nv/item_files/modem/mav/enable_blind_ul_drs_backoff_for_f_plus_f_ulca
/nv/item_files/modem/nr5g/RRC/cap_control_pc_per_band_blacklist_v2
/nv/item_files/modem/lte/ML1/x2l_irat_2tx_ant
/nv/item_files/modem/lte/rrc/stick_emc_plmn_ctrl
/nv/item_files/modem/nr5g/RRC/cap_enable_pl_info
/nv/item_files/modem/mav/skip_lte_cap_prune
/nv/item_files/modem/lte/ML1/gm_enable_hst_ta_drop
/nv/item_files/modem/mav/skip_icon_override_during_enh_buffering
/nv/item_files/modem/mav/enable_wireless_qoe
/nv/item_files/modem/nr5g/RRC/cap_feature_per_features_set_params_v2
Unidentified fields (1)
TagnlenValueNote
9fa71012b200 (178)small binary blob that precedes the NV item list
Band combos

What the iOS 26.0.1 Qualcomm X80 · Mav25 package advertises on this carrier's networks.

TMO default bundle on 310-160 310-200 310-210 310-220 310-230 310-240 310-250 310-260 310-270 310-310 310-490 310-660 310-800 311-660 311-882
PlatformsCombosEN-DCNRLTENR-DCMax CCNR bandsLTE anchors
P1 688796090195n25 n41 n48 n66 n71 n77
FR2 n258 n260 n261		B2 B12 B48 B66 B71
P4P6 699796200195n25 n41 n48 n66 n71 n77
FR2 n258 n260 n261		B2 B12 B48 B66 B71
P5 625795460196n25 n41 n48 n66 n71 n77
FR2 n258 n260 n261		B2 B12 B48 B66 B71
Modem defaults this file replaces

Files the package ships at the EFS paths this bundle's .der.pri writes.

EFS pathSet byPackage copy
/policyman/carrier_policy.xmloverrides_mvno1_V53_V54_V57.der.pribbcfg.mbn P1P4P5P6 Compare
/data/3gpp/data_3gpp_dynamic_config.xmloverrides_mvno1_V53_V54_V57.der.pribbcfg.mbn P1P4P5P6 Compare
/policyman/5g_sa_allowed_on_ndds.xmloverrides_mvno1_V53_V54_V57.der.pribbcfg.mbn P1P4P5P6 Compare
/policyman/carrier_policy.xmloverrides_V53_V54_V57.der.pribbcfg.mbn P1P4P5P6 Compare
/data/3gpp/data_3gpp_dynamic_config.xmloverrides_V53_V54_V57.der.pribbcfg.mbn P1P4P5P6 Compare

2 more XML values set paths the package leaves unset.