carrier-explode Explode and decode carrier data GitHub About
CMCC_cn

overrides_D83_D84_D37_D38.der.pri Modem package.

Header
Written forQualcomm modem
PRI Revision5.4.161
Settings (70)

efs:/data/3gpp (1)

3GPP data dynamic configlikely =
Per-PLMN data rules, domestic/international roaming PLMN listsefs:/data/3gpp/data_3gpp_dynamic_config.xml

efs:/nv/item_files/ims (1)

IMS enable = 2
Enables the IMS task (VoLTE, VoWiFi, SMS over IMS)efs:/nv/item_files/ims/IMS_enable

efs:/nv/item_files/modem/geran/grr (2)

g2l_blind_redir_after_srvcc_controlunverified = 1
GERAN setting: GSM/GPRS radio resourceefs:/nv/item_files/modem/geran/grr/g2l_blind_redir_after_srvcc_control
G2L blind redirect after CSFBlikely = 1
GSM->LTE blind redirection after a CSFB callefs:/nv/item_files/modem/geran/grr/g2l_blind_redir_after_csfb_control

efs:/nv/item_files/modem/lte/ML1 (3)

x2l_irat_2tx_antunverified = 1
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/ML1/x2l_irat_2tx_ant
num_enb_tx_antunverified = 2
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/ML1/num_enb_tx_ant
fr2_priority_optimizationunverified =
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/ML1/fr2_priority_optimization

efs:/nv/item_files/modem/lte/rrc/bbq (1)

Fake eNodeB mitigationlikely = 1= On
LTE false-base-station (fake eNodeB) mitigationefs:/nv/item_files/modem/lte/rrc/bbq/bbq_mitigation

efs:/nv/item_files/modem/lte/rrc/efs (5)

dsds_timersunverified =
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/rrc/efs/dsds_timers
c2k_rx_configunverified = 2
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/rrc/efs/c2k_rx_config
LTE band priority listlikely =
Prioritised band list for LFS/FFS scans (uint16 array)efs:/nv/item_files/modem/lte/rrc/efs/band_priority_list_v2
LTE feature disablelikely =
LTE RRC capability feature-disable bitmapefs:/nv/item_files/modem/lte/rrc/efs/lte_feature_disable
hst_scan_paramsunverified = 37383
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/rrc/efs/hst_scan_params

efs:/nv/item_files/modem/mav (15)

enable_ds_mit_for_marginal_coveragelikely = 1
Data-stall mitigation: Detects stalled data sessions and backs off NR / SA to recoverefs:/nv/item_files/modem/mav/enable_ds_mit_for_marginal_coverage
enable_ds_mitigationlikely = 1
Data-stall mitigation: Detects stalled data sessions and backs off NR / SA to recoverefs:/nv/item_files/modem/mav/enable_ds_mitigation
5G on non-DDS SIMlikely = 1= On
Allow 5G on the SIM that is not the default data subscriptionefs:/nv/item_files/modem/mav/5g_allowed_ndds
disable_sa_deprio_on_wifi_assistlikely = 1
Smart data mode: Apple SDM: turns NR / SA off or deprioritises SA when it does not pay offefs:/nv/item_files/modem/mav/disable_sa_deprio_on_wifi_assist
disable_sa_icon_based_on_idle_l2nr_measlikely = 1
5G icon rule: Status-bar 5G / 5G UW / 5G UC / 5G+ icon override logicefs:/nv/item_files/modem/mav/disable_sa_icon_based_on_idle_l2nr_meas
disable_sa_icon_based_on_l2nr_mrlikely = 1
5G icon rule: Status-bar 5G / 5G UW / 5G UC / 5G+ icon override logicefs:/nv/item_files/modem/mav/disable_sa_icon_based_on_l2nr_mr
Disable SA on null SUCIlikely = 0= Off
Turn off 5G SA when the SUCI uses the null protection scheme (SUPI sent unconcealed)efs:/nv/item_files/modem/mav/mav_disable_sa_if_null_suci
Disable SA without cipheringlikely = 0= Off
Turn off 5G SA when the network does not cipherefs:/nv/item_files/modem/mav/mav_disable_sa_no_ciph
BWP switch on screen locklikely = 1= On
Move to a narrower NR bandwidth part while the screen is lockedefs:/nv/item_files/modem/mav/enable_bwp_switching_screen_lock
Dynamic SAlikely = 0= Off
Turn 5G SA capability on and off with coverage (dyn_sa_* / dyn_cap_* timers and thresholds)efs:/nv/item_files/modem/mav/enable_dyn_sa
Dynamic VoNRlikely = 0= Off
Turn VoNR on and off dynamically, alongside dynamic SAefs:/nv/item_files/modem/mav/enable_dyn_vonr
sa_depri_td_bwp_thresh_vallikely = 30
Smart data mode: Apple SDM: turns NR / SA off or deprioritises SA when it does not pay offefs:/nv/item_files/modem/mav/sa_depri_td_bwp_thresh_val
mav_monitor_3cc_check_for_5gAlikely = 1
5G icon rule: Status-bar 5G / 5G UW / 5G UC / 5G+ icon override logicefs:/nv/item_files/modem/mav/mav_monitor_3cc_check_for_5gA
mav_monitor_mm_mb_replace_nr5g_with_nr5guwblikely = 1
5G icon rule: Status-bar 5G / 5G UW / 5G UC / 5G+ icon override logicefs:/nv/item_files/modem/mav/mav_monitor_mm_mb_replace_nr5g_with_nr5guwb
UAI release preferencelikely = 010001010104061e
Rel-16 UE Assistance Information releasePreference settingsefs:/nv/item_files/modem/mav/rel_pref_config

efs:/nv/item_files/modem/mmode (4)

Unblock NR on forbidden PLMNlikely = 1= On
Allow lifting the NR5G PLMN block that CM applies after NR registration failuresefs:/nv/item_files/modem/mmode/mav_unblock_nr_fplmn
SMS domain preference listunverified =
Per-RAT/PLMN SMS domain list; layout not publicefs:/nv/item_files/modem/mmode/sms_domain_pref_list
Voice domain preference = 3= IMS PS voice preferred
E-UTRAN voice domain (TS 24.301 9.9.3.44)efs:/nv/item_files/modem/mmode/voice_domain_pref
NR5G disable modeunverified = 0= NR5G enabled
Disables NR5G SA and/or NSAefs:/nv/item_files/modem/mmode/nr5g_disable_mode

efs:/nv/item_files/modem/nas (20)

eplmn_cell_reselectunverified = 1
NAS setting: NAS mobility management / PLMN selectionefs:/nv/item_files/modem/nas/eplmn_cell_reselect
force_esr_ndds_custunverified = 1
NAS setting: NAS mobility management / PLMN selectionefs:/nv/item_files/modem/nas/force_esr_ndds_cust
hplmn_rat_order_ctrlunverified = 2
NAS setting: NAS mobility management / PLMN selectionefs:/nv/item_files/modem/nas/hplmn_rat_order_ctrl
mav_interlace_scan_init_timerunverified = 2
Apple modem option: Apple-only (Maverick) modem option; undocumentedefs:/nv/item_files/modem/nas/mav_interlace_scan_init_timer
Max validate SIM counterlikely = 2
SIM validation retry limitefs:/nv/item_files/modem/nas/max_validate_sim_counter
HPLMN RAT orderlikely = NR > LTE > GSM > WCDMA
Home-PLMN RAT search order: uint16 count, then sys_sys_mode RATsefs:/nv/item_files/modem/nas/hplmn_rat_order
t3411_value_during_mmtel_callunverified = 2
NAS setting: NAS mobility management / PLMN selectionefs:/nv/item_files/modem/nas/t3411_value_during_mmtel_call
TD-SCDMA operator PLMN listlikely =
Packed PLMN listefs:/nv/item_files/modem/nas/tdscdma_op_plmn_list
IRAT search timerlikely = 18000000x1b7740
Inter-RAT search timerefs:/nv/item_files/modem/nas/irat_search_timer
Ignore MT CSFB during VoLTE = 1= On
Ignore a mobile-terminated CSFB page while a VoLTE call is activeefs:/nv/item_files/modem/nas/lte_nas_ignore_mt_csfb_during_volte_call
mt_detach_abnormal_handlingunverified = 1
NAS setting: NAS mobility management / PLMN selectionefs:/nv/item_files/modem/nas/mt_detach_abnormal_handling
SRVCC support = 1= On
SRVCC capability indication from E-UTRAN to UTRAN (TS 23.216)efs:/nv/item_files/modem/nas/nas_srvcc_support
mav_sa_lte_prio_sub_band_per_plmnlikely =
Band priority per PLMN: Per-PLMN band / sub-band (ARFCN range) scan priorityefs:/nv/item_files/modem/nas/mav_sa_lte_prio_sub_band_per_plmn
Reject NR null cipheringlikely = 0= Off
Reject a 5G NAS Security Mode Command that selects null ciphering (NEA0)efs:/nv/item_files/modem/nas/mav_nr_reject_smc_null_ciphering
mav_lte_steady_camp_durationunverified = 180
Apple modem option: Apple-only (Maverick) modem option; undocumentedefs:/nv/item_files/modem/nas/mav_lte_steady_camp_duration
mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdbunverified = 4
Apple modem option: Apple-only (Maverick) modem option; undocumentedefs:/nv/item_files/modem/nas/mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdb
Predefined NR ARFCNslikely =
NR channels to try first per PLMN: uint16 count, then {MCC, MNC, NR-ARFCN, band, flag} recordsefs:/nv/item_files/modem/nas/mav_nr_predef_narfcn
mav_nr_prio_sub_band_per_plmnlikely =
Band priority per PLMN: Per-PLMN band / sub-band (ARFCN range) scan priorityefs:/nv/item_files/modem/nas/mav_nr_prio_sub_band_per_plmn
is_x_to_nr_enabledunverified = 657930x10101
NAS setting: NAS mobility management / PLMN selectionefs:/nv/item_files/modem/nas/is_x_to_nr_enabled
pri_fplmnlikely =
PLMN list: Packed BCD MCC/MNC list (TS 31.102)efs:/nv/item_files/modem/nas/pri_fplmn

efs:/nv/item_files/modem/nr5g/RRC (8)

cap_srs_tx_switch_controllikely = 3
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_srs_tx_switch_control
NR band capabilitylikely =
NR band feature-capability list; proprietary layoutefs:/nv/item_files/modem/nr5g/RRC/cap_feature_band_nr
cap_control_mrdc_t_plus_t_band_comboslikely = 0
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_mrdc_t_plus_t_band_combos
cap_control_nrca_2x_f_plus_t_band_comboslikely = 1
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_2x_f_plus_t_band_combos
cap_control_nrca_3x_f_plus_t_band_comboslikely = 168430090x1010101
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_3x_f_plus_t_band_combos
NR TDD+FDD combo controllikely = 7
Enables NR-CA/NR-DC TDD+FDD band-combo classesefs:/nv/item_files/modem/nr5g/RRC/cap_control_t_plus_f_band_combos
cap_swul_controllikely = 1
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_swul_control
cap_feature_maclikely =
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_feature_mac

efs:/nv/item_files/modem/qmi (1)

mav_fws_gsm_key_signature_bitmaskunverified = 31115
Apple modem option: Apple-only (Maverick) modem option; undocumentedefs:/nv/item_files/modem/qmi/mav_fws_gsm_key_signature_bitmask

efs:/nv/item_files/modem/qmi/cat (1)

Block SMS-PP envelopelikely = 0= Off
Block SIM Toolkit SMS-PP (data download) envelopes, per subscriptionefs:/nv/item_files/modem/qmi/cat/qmi_cat_block_sms_pp_env_per_sub

efs:/nv/item_files/modem/uim/mmgsdi (1)

invalidate_nitzunverified = 1
SIM setting: UIM / SIM manager / SIM Toolkitefs:/nv/item_files/modem/uim/mmgsdi/invalidate_nitz

efs:/nv/reg_files/modem/lte/rrc/csp (1)

pref_freq_listunverified =
LTE setting: LTE RRC / L1 / L2efs:/nv/reg_files/modem/lte/rrc/csp/pref_freq_list

efs:/policyman (2)

Carrier policylikely =
PolicyMan rules keyed on MCC/PLMN: RAT capability, RF bands, UE modeefs:/policyman/carrier_policy.xml
5g_sa_allowed_on_ndds.xmllikely =
PolicyMan policy: PolicyMan XML rules (RAT capability, bands, 5G/SA gating)efs:/policyman/5g_sa_allowed_on_ndds.xml

nv (1)

PRI revision = 10552325= 5.4.1610xa10405
Packed PRI Revision headernv:62005

pri (3)

Legacy NV item list =
Legacy NV items the modem may take from this file; with a value here: 62005.pri:nv-list
NV path schema index =
333 NV paths the PRI format knows (MAVZ); not overrides.pri:schema
pri:9fa710 = 178
Unidentified field, 1 time, 2 bytes: small binary blob that precedes the NV item list.
Band combos

What the iOS 26.4.2 Qualcomm Snapdragon X70 · Mav23 package advertises on this carrier's networks.

CMCC default bundle on 460-00 460-02 460-07 460-08
PlatformsCombosEN-DCNRLTENR-DCMax CCNR bandsLTE anchors
P1P4P5P6P7 511239003n28 n41 n79B3 B8 B39 B40 B41
P2P3P8P9P10P11P12P13P15 481236003n28 n41 n79B3 B8 B39 B40 B41
Modem defaults this file replaces

Files the package ships at the EFS paths this bundle's .der.pri writes.

EFS pathPackage copy
/policyman/carrier_policy.xmlbbcfg.mbn P1P2P3P4P5P6P7P8P9P10P11P12P13P15 Compare
/data/3gpp/data_3gpp_dynamic_config.xmlbbcfg.mbn P1P2P3P4P5P6P7P8P9P10P11P12P13P15 Compare
/policyman/5g_sa_allowed_on_ndds.xmlbbcfg.mbn P1P4P5P6P7 Compare