carrier-explode
Explode and decode carrier data
GitHub
About
Carriers
Countries
Features
Builds
Compare
Wiki
iOS
▾
iOS
Pixel
Samsung
iPadOS
watchOS
C
CarrierLab
iOS 26.0 image · build 65.0.1
▾
iOS 27.2 beta 3 image · build 73.0
beta
iOS 27.2 beta 1–2 image · build 72.7.1
beta
iOS 27.0 – 27.0.1 image · build 72.0
current release
iOS 27.0 beta 5–8 image · build 72.0
beta
iOS 27.0 beta 1–4 image · build 71.5.12
beta
iOS 26.5 – 26.6.2 image · build 70.0
iOS 26.5.1 image · build 70.0
iOS 26.4 – 26.4.2 image · build 69.0
iOS 26.3.1 image · build 68.0
iOS 26.3 image · build 68.0
iOS 26.2 – 26.2.1 image · build 67.0
iOS 26.1 image · build 66.0
iOS 26.0 – 26.0.1 image · build 65.0.1
iOS 26.0 image · build 65.0.1
iOS 18.5 – 18.6.2 image · build 64.0
iOS 18.4 – 18.4.1 image · build 63.0
iOS 18.3 – 18.3.2 image · build 62.0
iOS 18.3.1 – 18.3.2 image · build 62.0
iOS 18.2 – 18.2.1 image · build 61.0
iOS 18.1 – 18.1.1 image · build 60.0
iOS 18.0 – 18.0.1 image · build 59.0
iPhone 17 Pro, 17 Pro Max · Qualcomm X80 · Mav25
▾
iPhone 17 Pro, 17 Pro Max · Qualcomm X80 · Mav25
Overview
Settings (159)
Modem
Files (6)
Changes
overrides_V53_V54_V57.der.pri
Modem package
.
Header
Dialect
Qualcomm
PRI Revision
5.0.161
Settings (46)
efs:/ds/atcop
(1)
·
atcop_cops_auto_mode.txt
unverified
=
49
Data services setting: Data services (PDN, throttling, AT commands)
efs:/ds/atcop/atcop_cops_auto_mode.txt
efs:/mav
(1)
·
Mode preference police mask
unverified
=
95
Apple mask over the PRI mode preference
efs:/mav/mav_police_pri_mode_pref_mask
efs:/nv/item_files/ims
(2)
·
IMS enable
=
2
Enables the IMS task (VoLTE, VoWiFi, SMS over IMS)
efs:/nv/item_files/ims/IMS_enable
·
IMS media service config
unverified
=
hex, 512 bytes
IMS media (codec/RTP) service config; no public schema
efs:/nv/item_files/ims/media_service_config
efs:/nv/item_files/modem/lte/rrc/efs
(5)
·
LTE feature enable
=
hex, 32 bytes
LTE RRC capability feature-enable bitmap; bit list unpublished
efs:/nv/item_files/modem/lte/rrc/efs/lte_feature_enable
·
ho_neigh_cell_si_acq_params
unverified
=
63
LTE setting: LTE RRC / L1 / L2
efs:/nv/item_files/modem/lte/rrc/efs/ho_neigh_cell_si_acq_params
·
data_inactivity_control
unverified
=
hex, 20 bytes
LTE setting: LTE RRC / L1 / L2
efs:/nv/item_files/modem/lte/rrc/efs/data_inactivity_control
·
lte_spec_feature_r11
=
524548
0x80104
3GPP release: Signalled 3GPP release
efs:/nv/item_files/modem/lte/rrc/efs/lte_spec_feature_r11
·
lte_spec_feature_r11_tdd
=
524544
0x80100
3GPP release: Signalled 3GPP release
efs:/nv/item_files/modem/lte/rrc/efs/lte_spec_feature_r11_tdd
efs:/nv/item_files/modem/mav
(2)
·
Disable SA on null SUCI
=
0
= Off
Turn off 5G SA when the SUCI uses the null protection scheme (SUPI sent unconcealed)
efs:/nv/item_files/modem/mav/mav_disable_sa_if_null_suci
·
sa_depri_td_bwp_thresh_val
=
30
Smart data mode: Apple SDM: turns NR / SA off or deprioritises SA when it does not pay off
efs:/nv/item_files/modem/mav/sa_depri_td_bwp_thresh_val
efs:/nv/item_files/modem/mmode
(6)
·
SMS domain preference list
unverified
=
hex, 15 bytes
Per-RAT/PLMN SMS domain list; layout not public
efs:/nv/item_files/modem/mmode/sms_domain_pref_list
·
max_ims_reg_attempt_timer
unverified
=
120
Multimode setting: Call manager / system determination
efs:/nv/item_files/modem/mmode/max_ims_reg_attempt_timer
·
Voice domain preference
=
3
= IMS PS voice preferred
E-UTRAN voice domain (TS 24.301 9.9.3.44)
efs:/nv/item_files/modem/mmode/voice_domain_pref
·
nrdc_mode
unverified
=
1
Multimode setting: Call manager / system determination
efs:/nv/item_files/modem/mmode/nrdc_mode
·
NR5G emergency support
unverified
=
1
= On
NR5G emergency-call support
efs:/nv/item_files/modem/mmode/nr5g_emc_support
·
NR5G disable mode
unverified
=
0
= NR5G enabled
Disables NR5G SA and/or NSA
efs:/nv/item_files/modem/mmode/nr5g_disable_mode
efs:/nv/item_files/modem/mmode/qmi
(1)
·
Allow auto answer
=
1
= On
Allow automatic answering of incoming voice calls
efs:/nv/item_files/modem/mmode/qmi/mav_pri_allow_auto_answer
efs:/nv/item_files/modem/nas
(6)
·
CSG support
=
0
Closed Subscriber Group (femtocell) support
efs:/nv/item_files/modem/nas/csg_support_configuration
·
HPLMN RAT order
=
CDMA > WCDMA > GSM > HDR > LTE > NR
hex, 12 bytes
Home-PLMN RAT search order: uint16 count, then sys_sys_mode RATs
efs:/nv/item_files/modem/nas/hplmn_rat_order
·
ISR
=
1
= On
Idle-mode Signalling Reduction (TS 23.401)
efs:/nv/item_files/modem/nas/isr
·
SRVCC support
=
1
= On
SRVCC capability indication from E-UTRAN to UTRAN (TS 23.216)
efs:/nv/item_files/modem/nas/nas_srvcc_support
·
Reject NR null ciphering
=
0
= Off
Reject a 5G NAS Security Mode Command that selects null ciphering (NEA0)
efs:/nv/item_files/modem/nas/mav_nr_reject_smc_null_ciphering
·
cm_efs_mav_health_monitor_control_pri
unverified
=
0
NAS setting: NAS mobility management / PLMN selection
efs:/nv/item_files/modem/nas/cm_efs_mav_health_monitor_control_pri
efs:/nv/item_files/modem/nr5g/RRC
(11)
·
cap_control_4cc_ulca_fr2
=
1
NR UE capability: NR RRC UE-capability toggle
efs:/nv/item_files/modem/nr5g/RRC/cap_control_4cc_ulca_fr2
·
NR band capability
=
hex, 29 bytes
NR band feature-capability list; proprietary layout
efs:/nv/item_files/modem/nr5g/RRC/cap_feature_band_nr
·
cap_add_bw
=
hex, 772 bytes
NR UE capability: NR RRC UE-capability toggle
efs:/nv/item_files/modem/nr5g/RRC/cap_add_bw
·
cap_csi_rs_32_port_control
=
hex, 195 bytes
NR UE capability: NR RRC UE-capability toggle
efs:/nv/item_files/modem/nr5g/RRC/cap_csi_rs_32_port_control
·
cap_control_dl_256qam
=
257
NR UE capability: NR RRC UE-capability toggle
efs:/nv/item_files/modem/nr5g/RRC/cap_control_dl_256qam
·
NR TDD+FDD combo control
=
15
Enables NR-CA/NR-DC TDD+FDD band-combo classes
efs:/nv/item_files/modem/nr5g/RRC/cap_control_t_plus_f_band_combos
·
cap_control_nrca_2x_f_plus_t_band_combos
=
1
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
efs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_2x_f_plus_t_band_combos
·
cap_control_nrca_3x_f_plus_t_band_combos
=
1103823438081
0x10101010101
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
efs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_3x_f_plus_t_band_combos
·
cap_control_nrca_3x_t_plus_t_band_combos
=
1
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
efs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_3x_t_plus_t_band_combos
·
cap_control_nrca_4x_f_plus_t_band_combos
=
65793
0x10101
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capability
efs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_4x_f_plus_t_band_combos
·
cap_swul_control
=
1
NR UE capability: NR RRC UE-capability toggle
efs:/nv/item_files/modem/nr5g/RRC/cap_swul_control
efs:/nv/item_files/modem/qmi/cat
(1)
·
Block SMS-PP envelope
=
0
= Off
Block SIM Toolkit SMS-PP (data download) envelopes, per subscription
efs:/nv/item_files/modem/qmi/cat/qmi_cat_block_sms_pp_env_per_sub
efs:/nv/item_files/modem/uim/uimdrv
(1)
·
mav_uim_wakeup_poll_timer_config
unverified
=
1
Apple modem option: Apple-only (Maverick) modem option; undocumented
efs:/nv/item_files/modem/uim/uimdrv/mav_uim_wakeup_poll_timer_config
efs:/nv/item_files/wcdma/rrc
(2)
·
wcdma_ppac_support
unverified
=
1
WCDMA setting: WCDMA RRC
efs:/nv/item_files/wcdma/rrc/wcdma_ppac_support
·
WCDMA RRC feature
=
253
WCDMA RRC feature mask
efs:/nv/item_files/wcdma/rrc/wcdma_rrc_feature
nv
(4)
·
RTRE Configuration
=
1
nv:855
·
PRI revision
=
10551301
= 5.0.161
0xa10005
Packed PRI Revision header
nv:62005
·
NV 58021
unverified
=
255
nv:58021
▾
Call Manager Feature Group
1 of 25 flags set
nv:62012
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
pri
(3)
·
Legacy NV item list
=
show list, 35 entries
Legacy NV items the modem may take from this file; with a value here: 62012, 58021, 62005, 855.
pri:nv-list
·
NV path schema index
=
show list, 357 entries
357 NV paths the PRI format knows (MAVZ); not overrides.
pri:schema
·
pri:9fa710
=
178
Unidentified field, 1 time, 2 bytes: small binary blob that precedes the NV item list.