carrier-explode Explode and decode carrier data GitHub About
 TMobile_US

overrides_mvno1_V53_V54_V57.der.pri Modem package.

Header
Written forQualcomm modem
PRI Revision5.4.161
Settings (85)

efs:/data (1)

APM ruleslikely = "APN_String:fast.t-mobile.com; ATTACH_TYPE_RULES:TRUE; P-CSCFRequired:4; IPAddressRequired:5; DNSAddressRequired:4; P-CSCF_OR_DNSAddressRequired:4; ON_DEMAND_TYPE_RULES:TRUE; P-CSCFRequired:4; IPAddressRequired:5; DNSAddressRequired:4; P-CSCF_OR_DNSAddressRequired:4; "
Attach PDN Manager rules (which PDN is required for attach)efs:/data/ds_dsd_apm_rules.txt

efs:/data/3gpp (1)

3GPP data dynamic configlikely =
Per-PLMN data rules, domestic/international roaming PLMN listsefs:/data/3gpp/data_3gpp_dynamic_config.xml

efs:/nv/item_files/ims (2)

IMS enable = 2
Enables the IMS task (VoLTE, VoWiFi, SMS over IMS)efs:/nv/item_files/ims/IMS_enable
IMS media service configunverified =
IMS media (codec/RTP) service config; no public schemaefs:/nv/item_files/ims/media_service_config

efs:/nv/item_files/modem/data/3gpp/ps (1)

3gpp_rel_versionlikely = 5
3GPP release: Signalled 3GPP releaseefs:/nv/item_files/modem/data/3gpp/ps/3gpp_rel_version

efs:/nv/item_files/modem/lte/rrc (1)

PC2 whitelistunverified =
Bands allowed Power Class 2 (26 dBm)efs:/nv/item_files/modem/lte/rrc/PC2_WHITELIST.xml

efs:/nv/item_files/modem/lte/rrc/bbq (1)

Fake eNodeB mitigationlikely = 1= On
LTE false-base-station (fake eNodeB) mitigationefs:/nv/item_files/modem/lte/rrc/bbq/bbq_mitigation

efs:/nv/item_files/modem/lte/rrc/cap (4)

max_lte_cap_sizeunverified = 7000
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/rrc/cap/max_lte_cap_size
whitelist_ca_comboslikely =
CA combo list: LTE CA / EN-DC band-combination allow/deny listefs:/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos
blacklist_ca_comboslikely =
CA combo list: LTE CA / EN-DC band-combination allow/deny listefs:/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos
whitelist_ca_combos_with_laalikely =
CA combo list: LTE CA / EN-DC band-combination allow/deny listefs:/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_laa

efs:/nv/item_files/modem/lte/rrc/efs (4)

LTE feature disablelikely =
LTE RRC capability feature-disable bitmapefs:/nv/item_files/modem/lte/rrc/efs/lte_feature_disable
LTE feature enablelikely =
LTE RRC capability feature-enable bitmap; bit list unpublishedefs:/nv/item_files/modem/lte/rrc/efs/lte_feature_enable
LTE band priority listlikely =
Prioritised band list for LFS/FFS scans (uint16 array)efs:/nv/item_files/modem/lte/rrc/efs/band_priority_list_v2
EPS fallback controlunverified = 171884591485920xfa200007530
VoNR to EPS fallback controlefs:/nv/item_files/modem/lte/rrc/efs/eps_fallback_control

efs:/nv/item_files/modem/mav (14)

enable_ds_mit_for_marginal_coveragelikely = 1
Data-stall mitigation: Detects stalled data sessions and backs off NR / SA to recoverefs:/nv/item_files/modem/mav/enable_ds_mit_for_marginal_coverage
LTE CA combos per PLMNlikely = 1= On
Prune the advertised LTE CA combos per PLMN from /policyman/band_combos_per_plmn.xmlefs:/nv/item_files/modem/mav/lte_ca_xml_generation
5G on non-DDS SIMlikely = 1= On
Allow 5G on the SIM that is not the default data subscriptionefs:/nv/item_files/modem/mav/5g_allowed_ndds
No mmWave for FaceTime videolikely = 1= On
Drop mmWave (FR2) during FaceTime video callsefs:/nv/item_files/modem/mav/disable_mmw_for_ftv
disable_sa_deprio_on_wifi_assistlikely = 1
Smart data mode: Apple SDM: turns NR / SA off or deprioritises SA when it does not pay offefs:/nv/item_files/modem/mav/disable_sa_deprio_on_wifi_assist
Disable SA on null SUCIlikely = 1= On
Turn off 5G SA when the SUCI uses the null protection scheme (SUPI sent unconcealed)efs:/nv/item_files/modem/mav/mav_disable_sa_if_null_suci
disable_sdmlikely = 1
Smart data mode: Apple SDM: turns NR / SA off or deprioritises SA when it does not pay offefs:/nv/item_files/modem/mav/disable_sdm
Drop EN-DC in call hysteresislikely = 15
Hysteresis timer before dropping EN-DC during a callefs:/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_val
Drop EN-DC in VoLTE hysteresislikely = 15
Hysteresis timer before dropping EN-DC during a VoLTE callefs:/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_volte_val
Dynamic SAlikely = 1= On
Turn 5G SA capability on and off with coverage (dyn_sa_* / dyn_cap_* timers and thresholds)efs:/nv/item_files/modem/mav/enable_dyn_sa
Dynamic VoNRlikely = 1= On
Turn VoNR on and off dynamically, alongside dynamic SAefs:/nv/item_files/modem/mav/enable_dyn_vonr
enable_fr1_scell_vrlfunverified = 1
Apple modem option: Apple-only (Maverick) modem option; undocumentedefs:/nv/item_files/modem/mav/enable_fr1_scell_vrlf
mav_monitor_replace_nr5g_uc_with_nr_basiclikely = 1
5G icon rule: Status-bar 5G / 5G UW / 5G UC / 5G+ icon override logicefs:/nv/item_files/modem/mav/mav_monitor_replace_nr5g_uc_with_nr_basic
SA coverage bandslikely = "G"
NR bands that count as 5G SA coverage (uint8 band numbers, zero-padded)efs:/nv/item_files/modem/mav/mav_sa_coverage_band_list

efs:/nv/item_files/modem/mmode (7)

UE usage settinglikely = 1= Data centric
TS 24.301 UE usage settingefs:/nv/item_files/modem/mmode/ue_usage_setting
SMS domain preference listunverified =
Per-RAT/PLMN SMS domain list; layout not publicefs:/nv/item_files/modem/mmode/sms_domain_pref_list
SMS domain preference = 1= PS (IMS) SMS preferred
SMS over IMS preferenceefs:/nv/item_files/modem/mmode/sms_domain_pref
Voice domain preference = 3= IMS PS voice preferred
E-UTRAN voice domain (TS 24.301 9.9.3.44)efs:/nv/item_files/modem/mmode/voice_domain_pref
nrdc_modeunverified = 1
Multimode setting: Call manager / system determinationefs:/nv/item_files/modem/mmode/nrdc_mode
NR5G emergency supportunverified = 1= On
NR5G emergency-call supportefs:/nv/item_files/modem/mmode/nr5g_emc_support
NR5G disable modeunverified = 0= NR5G enabled
Disables NR5G SA and/or NSAefs:/nv/item_files/modem/mmode/nr5g_disable_mode

efs:/nv/item_files/modem/nas (8)

hplmn_rat_order_ctrlunverified = 2
NAS setting: NAS mobility management / PLMN selectionefs:/nv/item_files/modem/nas/hplmn_rat_order_ctrl
mav_pssi_reg_unblock_hplmn_max_reg_failurelikely = 1
PSSI registration rule: Apple PLMN search / system-selection (PSSI) registration tuningefs:/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_max_reg_failure
mav_pssi_reg_unblock_hplmn_voice_not_avail_based_on_motion_stlikely = 1
PSSI registration rule: Apple PLMN search / system-selection (PSSI) registration tuningefs:/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_voice_not_avail_based_on_motion_st
HPLMN RAT orderlikely = NR > LTE > WCDMA > GSM
Home-PLMN RAT search order: uint16 count, then sys_sys_mode RATsefs:/nv/item_files/modem/nas/hplmn_rat_order
Satellite EARFCNs per carrierlikely = 310-830 EARFCN 8665
LTE channels the carrier's satellite (GFNH) service may register on, per PLMNefs:/nv/item_files/modem/nas/mav_pssi_reg_gfnh_allowed_frequencies_per_carrier
mav_pssi_reg_gfnh_allowed_plmn_per_carrierunverified = 0001000136013e03
Satellite PLMN rule: Apple satellite (GFNH) PLMN / geofence ruleefs:/nv/item_files/modem/nas/mav_pssi_reg_gfnh_allowed_plmn_per_carrier
SRVCC support = 1= On
SRVCC capability indication from E-UTRAN to UTRAN (TS 23.216)efs:/nv/item_files/modem/nas/nas_srvcc_support
mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdbunverified = 4
Apple modem option: Apple-only (Maverick) modem option; undocumentedefs:/nv/item_files/modem/nas/mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdb

efs:/nv/item_files/modem/nr5g/RRC (30)

cap_control_max_aggrlikely = 1
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_control_max_aggr
cap_control_higher_pow_lmtlikely = 1
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_control_higher_pow_lmt
cap_srs_tx_switch_impact_to_rx_controllikely = 1
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_srs_tx_switch_impact_to_rx_control
cap_control_nrca_f_plus_f_ulca_band_comboslikely = 257
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_f_ulca_band_combos
NR band capabilitylikely =
NR band feature-capability list; proprietary layoutefs:/nv/item_files/modem/nr5g/RRC/cap_feature_band_nr
cap_add_bwlikely =
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_add_bw
cap_csi_rs_32_port_controllikely =
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_csi_rs_32_port_control
cap_feature_phy_v2likely =
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_feature_phy_v2
cap_control_nrca_2x_f_plus_t_band_comboslikely = 1
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_2x_f_plus_t_band_combos
cap_control_nrca_3x_f_plus_t_band_comboslikely = 11038234380810x10101010101
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_3x_f_plus_t_band_combos
cap_control_nrca_3x_f_plus_t_band_combos_v2likely =
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_3x_f_plus_t_band_combos_v2
cap_control_nrca_3x_t_plus_t_band_comboslikely = 1
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_3x_t_plus_t_band_combos
cap_control_nrca_3x_tdd_band_combos_msim_v2likely =
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_3x_tdd_band_combos_msim_v2
cap_swul_3x_controllikely = 1
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_swul_3x_control
cap_control_nrca_4x_fdd_band_comboslikely = 257
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_4x_fdd_band_combos
cap_control_nrca_4x_f_plus_t_band_comboslikely = 657930x10101
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_4x_f_plus_t_band_combos
cap_control_nrca_4x_f_plus_t_band_combos_v2likely =
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_4x_f_plus_t_band_combos_v2
cap_swul_4x_controllikely = 1
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_swul_4x_control
cap_control_nrca_5x_f_plus_t_band_comboslikely = 657930x10101
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_5x_f_plus_t_band_combos
cap_control_nrca_5x_f_plus_t_band_combos_v2likely =
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_5x_f_plus_t_band_combos_v2
cap_swul_5x_controllikely = 1
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_swul_5x_control
cap_control_nrca_6x_f_plus_t_band_combos_v2likely =
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_6x_f_plus_t_band_combos_v2
cap_control_nrca_f_plus_f_band_comboslikely = 257
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_f_band_combos
cap_control_nrca_f_plus_t_band_comboslikely = 1
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_t_band_combos
NR TDD+FDD combo controllikely = 7
Enables NR-CA/NR-DC TDD+FDD band-combo classesefs:/nv/item_files/modem/nr5g/RRC/cap_control_t_plus_f_band_combos
cap_control_nrca_t_plus_t_band_comboslikely = 657930x10101
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_t_plus_t_band_combos
cap_swul_controllikely = 1
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_swul_control
cap_control_nrdc_2fdd_plus_fr2_band_comboslikely = 1
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrdc_2fdd_plus_fr2_band_combos
cap_control_nrdc_2tdd_plus_fr2_band_comboslikely = 257
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrdc_2tdd_plus_fr2_band_combos
cap_control_nrdc_2x_f_plus_t_plus_fr2_band_comboslikely = 1
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrdc_2x_f_plus_t_plus_fr2_band_combos

efs:/nv/item_files/modem/qmi/cat (1)

Block SMS-PP envelopelikely = 0= Off
Block SIM Toolkit SMS-PP (data download) envelopes, per subscriptionefs:/nv/item_files/modem/qmi/cat/qmi_cat_block_sms_pp_env_per_sub

efs:/policyman (2)

Carrier policylikely =
PolicyMan rules keyed on MCC/PLMN: RAT capability, RF bands, UE modeefs:/policyman/carrier_policy.xml
5g_sa_allowed_on_ndds.xmllikely =
PolicyMan policy: PolicyMan XML rules (RAT capability, bands, 5G/SA gating)efs:/policyman/5g_sa_allowed_on_ndds.xml

nv (5)

PRI revision = 10552325= 5.4.1610xa10405
Packed PRI Revision headernv:62005
AAGPS Positioning Modes Supportedlikely = 1065
nv:1920
Delay RAU during CSFB (probable)unverified = 0= Off
nv:62025
Call Manager Feature Group
1 of 25 flags setnv:62012
0123456789101112131415161718192021222324
20: Set for every iPhone from iPhone 14, and on older iPhones only by carriers that have shut down 3G; likely the newer form of flag 14
Feature Group (unnamed, tag 9f83e453)unverified
1 of 25 flags setnv:62035
0123456789101112131415161718192021222324
2: Set only by T-Mobile US

pri (3)

Legacy NV item list =
Legacy NV items the modem may take from this file; with a value here: 62012, 1920, 62025, 62005, 62035.pri:nv-list
NV path schema index =
364 NV paths the PRI format knows (MAVZ); not overrides.pri:schema
pri:9fa710 = 178
Unidentified field, 1 time, 2 bytes: small binary blob that precedes the NV item list.
Band combos

What the iOS 26.4.2 Qualcomm X80 · Mav25 package advertises on this carrier's networks.

TMO default bundle on 310-160 310-200 310-210 310-220 310-230 310-240 310-250 310-260 310-270 310-310 310-490 310-660 310-800 311-660 311-882
PlatformsCombosEN-DCNRLTENR-DCMax CCNR bandsLTE anchors
P1 693796140245n25 n41 n48 n66 n71 n77
FR2 n258 n260 n261		B2 B12 B48 B66 B71
P4P6 702716310225n25 n41 n48 n66 n71 n77
FR2 n258 n260 n261		B2 B12 B48 B66 B71
P5 646795670226n25 n41 n48 n66 n71 n77
FR2 n258 n260 n261		B2 B12 B48 B66 B71
P7 29779218005n25 n41 n66 n71 n77
FR2 n258 n260 n261		B2 B12 B48 B66 B71
Modem defaults this file replaces

Files the package ships at the EFS paths this bundle's .der.pri writes.

EFS pathSet byPackage copy
/policyman/carrier_policy.xmloverrides_mvno1_V53_V54_V57.der.pribbcfg.mbn P1P4P5P6P7 Compare
/data/3gpp/data_3gpp_dynamic_config.xmloverrides_mvno1_V53_V54_V57.der.pribbcfg.mbn P1P4P5P6P7 Compare
/policyman/5g_sa_allowed_on_ndds.xmloverrides_mvno1_V53_V54_V57.der.pribbcfg.mbn P1P4P5P6P7 Compare
/policyman/carrier_policy.xmloverrides_V53_V54_V57.der.pribbcfg.mbn P1P4P5P6P7 Compare
/data/3gpp/data_3gpp_dynamic_config.xmloverrides_V53_V54_V57.der.pribbcfg.mbn P1P4P5P6P7 Compare

2 more XML values set paths the package leaves unset.