carrier-explode
Explode and decode carrier data
GitHub
About
Carriers
Countries
Features
Builds
Compare
Wiki
iOS
▾
iOS
Pixel
Samsung
iPadOS
watchOS
Close
Carriers
Rogers_ca
iOS 26.4 – 26.4.2 image · build 69.0
▾
iOS 27.2 beta 1–2 image · build 72.7.1
beta
iOS 27.0 – 27.0.1 image · build 72.0
current release
OTA iOS 26.5+ · build 70.1
iOS 26.5 – 26.6.2 image · build 70.0
OTA iOS 26.4+ · build 69.1
iOS 26.4 – 26.4.2 image · build 69.0
iOS 26.3.1 image · build 68.0
iOS 26.3 image · build 68.0
OTA iOS 26.2+ · build 67.2
iOS 26.2 – 26.2.1 image · build 67.0
OTA iOS 26.1+ · build 66.1
iOS 26.1 image · build 66.0
iOS 26.0 – 26.0.1 image · build 65.0.1
OTA iOS 18.5+ · build 64.3
OTA iOS 16.4+ · build 54.1
OTA iOS 15.2+ · build 49.1
OTA iOS 12.1+ · build 34.1
OTA iOS 11.1+ · build 30.1
OTA iOS 10.3+ · build 28.4
OTA iOS 10.2+ · build 27.1
OTA iOS 10.0+ · build 25.1
OTA iOS 9.3+ · build 24.2
OTA iOS 9.2+ · build 23.2
OTA iOS 9.0+ · build 21.2
OTA iOS 6.0+ · build 13.1
OTA iOS 4.0+ · build 7.2
OTA iOS 3.0+ · build 4.1
Overview
Settings
Modem
Files (40)
Changes
overrides_D73_D74_D27_D28.der.pri
iPhone 14 Pro
,
iPhone 14 Pro Max
,
iPhone 14
,
iPhone 14 Plus
Header
Written for
Qualcomm modem
PRI Revision
5.4.161
Settings (23)
efs:/data/3gpp
(1)
·
3GPP data dynamic config
likely
=
show XML, 652 bytes
Per-PLMN data rules, domestic/international roaming PLMN lists
efs:/data/3gpp/data_3gpp_dynamic_config.xml
efs:/nv/item_files/ims
(2)
·
IMS enable
=
2
Enables the IMS task (VoLTE, VoWiFi, SMS over IMS)
efs:/nv/item_files/ims/IMS_enable
·
IMS media service config
unverified
=
hex, 512 bytes
IMS media (codec/RTP) service config; no public schema
efs:/nv/item_files/ims/media_service_config
efs:/nv/item_files/modem/lte/rrc/bbq
(1)
·
Fake eNodeB mitigation
likely
=
1
= On
LTE false-base-station (fake eNodeB) mitigation
efs:/nv/item_files/modem/lte/rrc/bbq/bbq_mitigation
efs:/nv/item_files/modem/lte/rrc/efs
(1)
·
LTE feature enable
likely
=
hex, 32 bytes
LTE RRC capability feature-enable bitmap; bit list unpublished
efs:/nv/item_files/modem/lte/rrc/efs/lte_feature_enable
efs:/nv/item_files/modem/mav
(4)
·
5G UW bands
likely
=
hex, 18 bytes
NR bands that may show the 5G UW / 5G+ icon: uint16 count, 4 uint16 bands, 4 uint16 minimum bandwidths (MHz)
efs:/nv/item_files/modem/mav/uwb_nr_band_bw
·
mav_avoid_pco_for_aging
unverified
=
1
Apple modem option: Apple-only (Maverick) modem option; undocumented
efs:/nv/item_files/modem/mav/mav_avoid_pco_for_aging
·
mav_monitor_mm_mb_replace_nr5g_with_nr5guwb
likely
=
1
5G icon rule: Status-bar 5G / 5G UW / 5G UC / 5G+ icon override logic
efs:/nv/item_files/modem/mav/mav_monitor_mm_mb_replace_nr5g_with_nr5guwb
·
mav_ignore_high_bw_check
unverified
=
1
Apple modem option: Apple-only (Maverick) modem option; undocumented
efs:/nv/item_files/modem/mav/mav_ignore_high_bw_check
efs:/nv/item_files/modem/mmode
(2)
·
SMS domain preference list
unverified
=
hex, 15 bytes
Per-RAT/PLMN SMS domain list; layout not public
efs:/nv/item_files/modem/mmode/sms_domain_pref_list
·
SMS domain preference
=
1
= PS (IMS) SMS preferred
SMS over IMS preference
efs:/nv/item_files/modem/mmode/sms_domain_pref
efs:/nv/item_files/modem/nas
(3)
·
EMM NAS items
likely
=
hex, 32 bytes
32-byte EMM configuration blob
efs:/nv/item_files/modem/nas/emm_nas_nv_items
·
mav_pssi_reg_gfnh_allowed_plmn_per_carrier
unverified
=
000100012e01d302
Satellite PLMN rule: Apple satellite (GFNH) PLMN / geofence rule
efs:/nv/item_files/modem/nas/mav_pssi_reg_gfnh_allowed_plmn_per_carrier
·
SRVCC support
=
1
= On
SRVCC capability indication from E-UTRAN to UTRAN (TS 23.216)
efs:/nv/item_files/modem/nas/nas_srvcc_support
efs:/nv/item_files/modem/qmi/cat
(1)
·
Block SMS-PP envelope
likely
=
0
= Off
Block SIM Toolkit SMS-PP (data download) envelopes, per subscription
efs:/nv/item_files/modem/qmi/cat/qmi_cat_block_sms_pp_env_per_sub
efs:/nv/item_files/wcdma/rrc
(1)
·
Fast return to LTE after CSFB
likely
=
1
= On
Return from WCDMA to LTE right after a CSFB call
efs:/nv/item_files/wcdma/rrc/wcdma_rrc_fast_return_to_lte_after_csfb
efs:/policyman
(1)
·
Carrier policy
likely
=
show XML, 1259 bytes
PolicyMan rules keyed on MCC/PLMN: RAT capability, RF bands, UE mode
efs:/policyman/carrier_policy.xml
nv
(3)
·
PRI revision
=
10552325
= 5.4.161
0xa10405
Packed PRI Revision header
nv:62005
·
Band preference bits 16-31
=
48895
= GSM 450, GSM 480, GSM 750, GSM 850, GSM railways 900, GSM PCS 1900, WCDMA B1 2100, WCDMA B2 1900, WCDMA B4 1700, WCDMA B5 850, WCDMA B6 800, bit 12, bit 13, bit 15
Expand Band Preference 16 To 32 Bits
nv:946
▾
Call Manager Feature Group
1 of 25 flags set
nv:62012
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
20
: Set for every iPhone from iPhone 14, and on older iPhones only by carriers that have shut down 3G; likely the newer form of flag 14
pri
(3)
·
Legacy NV item list
=
show list, 35 entries
Legacy NV items the modem may take from this file; with a value here: 62012, 946, 62005.
pri:nv-list
·
NV path schema index
=
show list, 316 entries
316 NV paths the PRI format knows (MAVZ); not overrides.
pri:schema
·
pri:9fa710
=
178
Unidentified field, 1 time, 2 bytes: small binary blob that precedes the NV item list.