· dsds_timersunverified =
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/rrc/efs/dsds_timers · c2k_rx_configunverified = 2
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/rrc/efs/c2k_rx_config · LTE band priority list =
Prioritised band list for LFS/FFS scans (uint16 array)efs:/nv/item_files/modem/lte/rrc/efs/band_priority_list_v2 · LTE feature disable =
LTE RRC capability feature-disable bitmapefs:/nv/item_files/modem/lte/rrc/efs/lte_feature_disable · hst_scan_paramsunverified = 37383
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/rrc/efs/hst_scan_params · enable_ds_mitigation = 1
Data-stall mitigation: Detects stalled data sessions and backs off NR / SA to recoverefs:/nv/item_files/modem/mav/enable_ds_mitigation · 5G on non-DDS SIM = 1= On
Allow 5G on the SIM that is not the default data subscriptionefs:/nv/item_files/modem/mav/5g_allowed_ndds · disable_sa_icon_based_on_idle_l2nr_meas = 1
5G icon rule: Status-bar 5G / 5G UW / 5G UC / 5G+ icon override logicefs:/nv/item_files/modem/mav/disable_sa_icon_based_on_idle_l2nr_meas · disable_sa_icon_based_on_l2nr_mr = 1
5G icon rule: Status-bar 5G / 5G UW / 5G UC / 5G+ icon override logicefs:/nv/item_files/modem/mav/disable_sa_icon_based_on_l2nr_mr · Disable SA on null SUCI = 0= Off
Turn off 5G SA when the SUCI uses the null protection scheme (SUPI sent unconcealed)efs:/nv/item_files/modem/mav/mav_disable_sa_if_null_suci · Disable SA without ciphering = 0= Off
Turn off 5G SA when the network does not cipherefs:/nv/item_files/modem/mav/mav_disable_sa_no_ciph · BWP switch on screen lock = 1= On
Move to a narrower NR bandwidth part while the screen is lockedefs:/nv/item_files/modem/mav/enable_bwp_switching_screen_lock · Dynamic SA = 0= Off
Turn 5G SA capability on and off with coverage (dyn_sa_* / dyn_cap_* timers and thresholds)efs:/nv/item_files/modem/mav/enable_dyn_sa · Dynamic VoNR = 0= Off
Turn VoNR on and off dynamically, alongside dynamic SAefs:/nv/item_files/modem/mav/enable_dyn_vonr · Unblock NR on forbidden PLMN = 1= On
Allow lifting the NR5G PLMN block that CM applies after NR registration failuresefs:/nv/item_files/modem/mmode/mav_unblock_nr_fplmn · SMS domain preference listunverified =
Per-RAT/PLMN SMS domain list; layout not publicefs:/nv/item_files/modem/mmode/sms_domain_pref_list · Voice domain preference = 3= IMS PS voice preferred
E-UTRAN voice domain (TS 24.301 9.9.3.44)efs:/nv/item_files/modem/mmode/voice_domain_pref · NR5G disable modeunverified = 0= NR5G enabled
Disables NR5G SA and/or NSAefs:/nv/item_files/modem/mmode/nr5g_disable_mode · eplmn_cell_reselectunverified = 1
NAS setting: NAS mobility management / PLMN selectionefs:/nv/item_files/modem/nas/eplmn_cell_reselect · force_esr_ndds_custunverified = 1
NAS setting: NAS mobility management / PLMN selectionefs:/nv/item_files/modem/nas/force_esr_ndds_cust · hplmn_rat_order_ctrlunverified = 2
NAS setting: NAS mobility management / PLMN selectionefs:/nv/item_files/modem/nas/hplmn_rat_order_ctrl · mav_interlace_scan_init_timerunverified = 2
Apple modem option: Apple-only (Maverick) modem option; undocumentedefs:/nv/item_files/modem/nas/mav_interlace_scan_init_timer · Max validate SIM counter = 2
SIM validation retry limitefs:/nv/item_files/modem/nas/max_validate_sim_counter · HPLMN RAT order = NR > LTE > GSM > WCDMA
Home-PLMN RAT search order: uint16 count, then sys_sys_mode RATsefs:/nv/item_files/modem/nas/hplmn_rat_order · t3411_value_during_mmtel_callunverified = 2
NAS setting: NAS mobility management / PLMN selectionefs:/nv/item_files/modem/nas/t3411_value_during_mmtel_call · TD-SCDMA operator PLMN list =
Packed PLMN listefs:/nv/item_files/modem/nas/tdscdma_op_plmn_list · IRAT search timer = 18000000x1b7740
Inter-RAT search timerefs:/nv/item_files/modem/nas/irat_search_timer · Ignore MT CSFB during VoLTE = 1= On
Ignore a mobile-terminated CSFB page while a VoLTE call is activeefs:/nv/item_files/modem/nas/lte_nas_ignore_mt_csfb_during_volte_call · mt_detach_abnormal_handlingunverified = 1
NAS setting: NAS mobility management / PLMN selectionefs:/nv/item_files/modem/nas/mt_detach_abnormal_handling · SRVCC support = 1= On
SRVCC capability indication from E-UTRAN to UTRAN (TS 23.216)efs:/nv/item_files/modem/nas/nas_srvcc_support · mav_sa_lte_prio_sub_band_per_plmn =
Band priority per PLMN: Per-PLMN band / sub-band (ARFCN range) scan priorityefs:/nv/item_files/modem/nas/mav_sa_lte_prio_sub_band_per_plmn · Reject NR null ciphering = 0= Off
Reject a 5G NAS Security Mode Command that selects null ciphering (NEA0)efs:/nv/item_files/modem/nas/mav_nr_reject_smc_null_ciphering · mav_lte_steady_camp_durationunverified = 180
Apple modem option: Apple-only (Maverick) modem option; undocumentedefs:/nv/item_files/modem/nas/mav_lte_steady_camp_duration · mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdbunverified = 4
Apple modem option: Apple-only (Maverick) modem option; undocumentedefs:/nv/item_files/modem/nas/mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdb · Predefined NR ARFCNs =
NR channels to try first per PLMN: uint16 count, then {MCC, MNC, NR-ARFCN, band, flag} recordsefs:/nv/item_files/modem/nas/mav_nr_predef_narfcn · mav_nr_prio_sub_band_per_plmn =
Band priority per PLMN: Per-PLMN band / sub-band (ARFCN range) scan priorityefs:/nv/item_files/modem/nas/mav_nr_prio_sub_band_per_plmn · is_x_to_nr_enabledunverified = 657930x10101
NAS setting: NAS mobility management / PLMN selectionefs:/nv/item_files/modem/nas/is_x_to_nr_enabled · pri_fplmn =
PLMN list: Packed BCD MCC/MNC list (TS 31.102)efs:/nv/item_files/modem/nas/pri_fplmn · iPLMN =
PLMN list: Packed BCD MCC/MNC list (TS 31.102)efs:/nv/item_files/modem/nas/iPLMN · cap_srs_tx_switch_control = 3
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_srs_tx_switch_control · NR band capability =
NR band feature-capability list; proprietary layoutefs:/nv/item_files/modem/nr5g/RRC/cap_feature_band_nr · cap_control_mrdc_t_plus_t_band_combos = 0
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_mrdc_t_plus_t_band_combos · cap_control_nrca_2x_f_plus_t_band_combos = 1
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_2x_f_plus_t_band_combos · cap_control_nrca_3x_f_plus_t_band_combos = 0
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_3x_f_plus_t_band_combos · NR TDD+FDD combo control = 7
Enables NR-CA/NR-DC TDD+FDD band-combo classesefs:/nv/item_files/modem/nr5g/RRC/cap_control_t_plus_f_band_combos · cap_swul_control = 1
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_swul_control · cap_feature_mac =
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_feature_mac 
中国移动CMCC_cn
iOS 27.2 beta 3 image · build 73.0 beta 
iOS 26.5 – 26.6.2 image · build 70.0 
iOS 18.5 – 18.6.2 image · build 64.0 
OTA iOS 12.1.1+ · build 35.1 
