carrier-explode Explode and decode carrier data GitHub About

No modem file for iPhone 11, 11 Pro, 11 Pro Max, 12, 12 mini, 12 Pro, 12 Pro Max, 13, 13 mini, 13 Pro, 13 Pro Max, 14, 14 Plus, 14 Pro, 14 Pro Max, SE (3rd generation), SE (2020): they run the modem's defaults.

overrides_D83_D84_D37_D38.der.pri Modem package.

Header
Written forQualcomm modem
PRI Revision0.1.161
Settings (82)

efs:/data (1)

APM ruleslikely = "APN_String:internet; ATTACH_TYPE_RULES:TRUE; P-CSCFRequired:4; IPAddressRequired:5; DNSAddressRequired:4; P-CSCF_OR_DNSAddressRequired:4; ON_DEMAND_TYPE_RULES:TRUE; P-CSCFRequired:4; IPAddressRequired:5; DNSAddressRequired:4; P-CSCF_OR_DNSAddressRequired:4; "
Attach PDN Manager rules (which PDN is required for attach)efs:/data/ds_dsd_apm_rules.txt

efs:/data/3gpp/throttling (1)

srv_req_throt_config.txtunverified = "FAILURE_TIMER_5:720; "
Data services setting: Data services (PDN, throttling, AT commands)efs:/data/3gpp/throttling/srv_req_throt_config.txt

efs:/mav (1)

Mode preference police maskunverified = 92
Apple mask over the PRI mode preferenceefs:/mav/mav_police_pri_mode_pref_mask

efs:/nv/item_files/data/3gpp (2)

RPM paramslikely =
Radio Policy Manager retry limits (10 bytes)efs:/nv/item_files/data/3gpp/rpm_params
RPM SIM listlikely =
SIMs Radio Policy Manager applies toefs:/nv/item_files/data/3gpp/rpm_suppported_sim

efs:/nv/item_files/ims (2)

IMS enable = 2
Enables the IMS task (VoLTE, VoWiFi, SMS over IMS)efs:/nv/item_files/ims/IMS_enable
IMS media service configunverified =
IMS media (codec/RTP) service config; no public schemaefs:/nv/item_files/ims/media_service_config

efs:/nv/item_files/modem (1)

LTE connection controlunverified = 1
efs:/nv/item_files/modem/lte_connection_control

efs:/nv/item_files/modem/data/3gpp (1)

Call before PS attachlikely = 0= Off
Allow data-call origination before PS attachefs:/nv/item_files/modem/data/3gpp/call_orig_allowed_before_ps_attach

efs:/nv/item_files/modem/data/3gpp/ps (3)

Service request throttle behaviourlikely = 1
Service-request throttling behaviourefs:/nv/item_files/modem/data/3gpp/ps/ser_req_throttle_behavior
nr5g_ran_bit_rate_supportunverified = 657930x10101
Data services setting: Data services (PDN, throttling, AT commands)efs:/nv/item_files/modem/data/3gpp/ps/nr5g_ran_bit_rate_support
3gpp_rel_versionlikely = 5
3GPP release: Signalled 3GPP releaseefs:/nv/item_files/modem/data/3gpp/ps/3gpp_rel_version

efs:/nv/item_files/modem/data/epc (1)

PDN throttling configlikely = "FAILURE_TIMER_5:720; "
Carrier PDN throttling timersefs:/nv/item_files/modem/data/epc/pdn_throttling_config.txt

efs:/nv/item_files/modem/lte/L2/mac (1)

lte_mac_enable_aasunverified = 0
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/L2/mac/lte_mac_enable_aas

efs:/nv/item_files/modem/lte/ML1 (1)

cdrx_opt_infounverified = 257
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/ML1/cdrx_opt_info

efs:/nv/item_files/modem/lte/rrc/bbq (1)

Fake eNodeB mitigationlikely = 1= On
LTE false-base-station (fake eNodeB) mitigationefs:/nv/item_files/modem/lte/rrc/bbq/bbq_mitigation

efs:/nv/item_files/modem/lte/rrc/cap (4)

whitelist_ca_comboslikely =
CA combo list: LTE CA / EN-DC band-combination allow/deny listefs:/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos
blacklist_ca_comboslikely =
CA combo list: LTE CA / EN-DC band-combination allow/deny listefs:/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos
whitelist_ca_combos_with_laalikely =
CA combo list: LTE CA / EN-DC band-combination allow/deny listefs:/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_laa
LTE bands with UL CAlikely = B2 B5 B12 B14 B30 B66
LTE bands allowed in uplink carrier-aggregation combosefs:/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_ulca

efs:/nv/item_files/modem/lte/rrc/efs (11)

lte_conn_ctrl_barring_optimz_paramsunverified = 1
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/rrc/efs/lte_conn_ctrl_barring_optimz_params
LTE feature enablelikely =
LTE RRC capability feature-enable bitmap; bit list unpublishedefs:/nv/item_files/modem/lte/rrc/efs/lte_feature_enable
disable_4l_per_bandunverified =
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/rrc/efs/disable_4l_per_band
LTE band priority listlikely =
Prioritised band list for LFS/FFS scans (uint16 array)efs:/nv/item_files/modem/lte/rrc/efs/band_priority_list_v2
lte_rrc_sub_feature_enableunverified = "@"
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/rrc/efs/lte_rrc_sub_feature_enable
lte_connection_ctrl_paramsunverified =
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/rrc/efs/lte_connection_ctrl_params
LTE feature disablelikely =
LTE RRC capability feature-disable bitmapefs:/nv/item_files/modem/lte/rrc/efs/lte_feature_disable
lte_fgi_r8likely = 21013424620x7d3ff0fe
LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capabilityefs:/nv/item_files/modem/lte/rrc/efs/lte_fgi_r8
lte_fgi_r10likely = 14142
LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capabilityefs:/nv/item_files/modem/lte/rrc/efs/lte_fgi_r10
lte_fgi_r10_tddlikely = 14142
LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capabilityefs:/nv/item_files/modem/lte/rrc/efs/lte_fgi_r10_tdd
lte_fgi_r8_tddlikely = 21013424620x7d3ff0fe
LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capabilityefs:/nv/item_files/modem/lte/rrc/efs/lte_fgi_r8_tdd

efs:/nv/item_files/modem/mav (9)

LTE CA combos per PLMNlikely = 1= On
Prune the advertised LTE CA combos per PLMN from /policyman/band_combos_per_plmn.xmlefs:/nv/item_files/modem/mav/lte_ca_xml_generation
5G on non-DDS SIMlikely = 1= On
Allow 5G on the SIM that is not the default data subscriptionefs:/nv/item_files/modem/mav/5g_allowed_ndds
Disable SA on null SUCIlikely = 1= On
Turn off 5G SA when the SUCI uses the null protection scheme (SUPI sent unconcealed)efs:/nv/item_files/modem/mav/mav_disable_sa_if_null_suci
disable_sdmlikely = 1
Smart data mode: Apple SDM: turns NR / SA off or deprioritises SA when it does not pay offefs:/nv/item_files/modem/mav/disable_sdm
mav_dmc_enabledunverified = 1
Apple modem option: Apple-only (Maverick) modem option; undocumentedefs:/nv/item_files/modem/mav/mav_dmc_enabled
EN-DC combos per PLMNlikely = 1= On
Same per-PLMN capability pruning for EN-DC combos (next to cap_prune, skip_cap_prune)efs:/nv/item_files/modem/mav/endc_ca_file_generation
mav_monitor_enable_nr5g_uwb_based_on_motion_state_no_uli_caselikely = 0
5G icon rule: Status-bar 5G / 5G UW / 5G UC / 5G+ icon override logicefs:/nv/item_files/modem/mav/mav_monitor_enable_nr5g_uwb_based_on_motion_state_no_uli_case
sa_depri_bw_vallikely = 4
Smart data mode: Apple SDM: turns NR / SA off or deprioritises SA when it does not pay offefs:/nv/item_files/modem/mav/sa_depri_bw_val
sdm_nsa_icon_overridelikely = 0
Smart data mode: Apple SDM: turns NR / SA off or deprioritises SA when it does not pay offefs:/nv/item_files/modem/mav/sdm_nsa_icon_override

efs:/nv/item_files/modem/mmode (7)

mode_prefunverified = 92
Multimode setting: Call manager / system determinationefs:/nv/item_files/modem/mmode/mode_pref
SMS domain preference listunverified =
Per-RAT/PLMN SMS domain list; layout not publicefs:/nv/item_files/modem/mmode/sms_domain_pref_list
LTE band preferencelikely = 373833952788470x21fffffeffff
LTE band bitmap (bit n = band n+1)efs:/nv/item_files/modem/mmode/lte_bandpref
LTE disable durationlikely = 0
How long LTE stays disabled when CS services are unavailableefs:/nv/item_files/modem/mmode/lte_disable_duration
Voice domain preference = 3= IMS PS voice preferred
E-UTRAN voice domain (TS 24.301 9.9.3.44)efs:/nv/item_files/modem/mmode/voice_domain_pref
NR5G emergency supportunverified = 1= On
NR5G emergency-call supportefs:/nv/item_files/modem/mmode/nr5g_emc_support
NR5G disable modeunverified = 0= NR5G enabled
Disables NR5G SA and/or NSAefs:/nv/item_files/modem/mmode/nr5g_disable_mode

efs:/nv/item_files/modem/nas (7)

mav_pssi_reg_unblock_hplmn_max_reg_failurelikely = 1
PSSI registration rule: Apple PLMN search / system-selection (PSSI) registration tuningefs:/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_max_reg_failure
mav_pssi_reg_unblock_hplmn_voice_not_avail_based_on_motion_stlikely = 1
PSSI registration rule: Apple PLMN search / system-selection (PSSI) registration tuningefs:/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_voice_not_avail_based_on_motion_st
ISRlikely = 1= On
Idle-mode Signalling Reduction (TS 23.401)efs:/nv/item_files/modem/nas/isr
Reject LTE null cipheringlikely = 1= On
Reject an LTE NAS Security Mode Command that selects null ciphering (EEA0)efs:/nv/item_files/modem/nas/mav_lte_reject_smc_null_ciphering
SRVCC support = 1= On
SRVCC capability indication from E-UTRAN to UTRAN (TS 23.216)efs:/nv/item_files/modem/nas/nas_srvcc_support
mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdbunverified = 4
Apple modem option: Apple-only (Maverick) modem option; undocumentedefs:/nv/item_files/modem/nas/mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdb
CSG supportlikely = 1
Closed Subscriber Group (femtocell) supportefs:/nv/item_files/modem/nas/csg_support_configuration

efs:/nv/item_files/modem/nr5g/rrc (3)

endc_whitelist_ca_comboslikely =
CA combo list: LTE CA / EN-DC band-combination allow/deny listefs:/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos
endc_reduced_cc_lte_fr1_ca_comboslikely = 517
CA combo list: LTE CA / EN-DC band-combination allow/deny listefs:/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_lte_fr1_ca_combos
nrsa_whitelist_ca_comboslikely =
CA combo list: LTE CA / EN-DC band-combination allow/deny listefs:/nv/item_files/modem/nr5g/rrc/nrsa_whitelist_ca_combos

efs:/nv/item_files/modem/nr5g/RRC (11)

band_priority_listunverified =
NR5G setting: NR5G RRC / L1efs:/nv/item_files/modem/nr5g/RRC/band_priority_list
cap_add_bwlikely =
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_add_bw
cap_control_dl_256qamlikely = 1
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_control_dl_256qam
cap_feature_maclikely =
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_feature_mac
cap_feature_meas_and_mobslikely =
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_feature_meas_and_mobs
cap_feature_phylikely =
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_feature_phy
cap_control_nrca_f_plus_f_band_comboslikely = 257
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_f_band_combos
cap_control_nrca_f_plus_t_band_comboslikely = 1
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_t_band_combos
NR TDD+FDD combo controllikely = 7
Enables NR-CA/NR-DC TDD+FDD band-combo classesefs:/nv/item_files/modem/nr5g/RRC/cap_control_t_plus_f_band_combos
cap_control_nrca_t_plus_t_band_comboslikely = 257
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_t_plus_t_band_combos
cap_disable_ul_256qamlikely = 257
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_disable_ul_256qam

efs:/nv/item_files/modem/qmi/cat (1)

Block SMS-PP envelopelikely = 0= Off
Block SIM Toolkit SMS-PP (data download) envelopes, per subscriptionefs:/nv/item_files/modem/qmi/cat/qmi_cat_block_sms_pp_env_per_sub

efs:/nv/item_files/modem/sms (1)

Refresh vote OKlikely = 0= Off
Vote TRUE for SIM REFRESHefs:/nv/item_files/modem/sms/mmgsdi_refresh_vote_ok

efs:/nv/item_files/modem/uim/mmgsdi (1)

ens_slot_enabledunverified = 1
SIM setting: UIM / SIM manager / SIM Toolkitefs:/nv/item_files/modem/uim/mmgsdi/ens_slot_enabled

efs:/nv/item_files/wcdma/rrc (1)

WCDMA to LTE PS handoverlikely = 0= Off
WCDMA->LTE PS handover supportefs:/nv/item_files/wcdma/rrc/wcdma_rrc_wtol_ps_ho_support

efs:/policyman (2)

Carrier policylikely =
PolicyMan rules keyed on MCC/PLMN: RAT capability, RF bands, UE modeefs:/policyman/carrier_policy.xml
5g_sa_allowed_on_ndds.xmllikely =
PolicyMan policy: PolicyMan XML rules (RAT capability, bands, 5G/SA gating)efs:/policyman/5g_sa_allowed_on_ndds.xml

nv (5)

PRI revision = 10551552= 0.1.1610xa10100
Packed PRI Revision headernv:62005
ENS Enabledlikely = 1= On
Enhanced Network Selectionnv:3461
UMTS AMR Codec Preference Configlikely = 5
nv:6850
Call Manager Feature Group
2 of 25 flags setnv:62012
0123456789101112131415161718192021222324
12: Set only on AT&T's network (AT&T, its brands and Dish), always with flag 3 of the unnamed group
20: Set for every iPhone from iPhone 14, and on older iPhones only by carriers that have shut down 3G; likely the newer form of flag 14
Feature Group (unnamed, tag 9f83e453)unverified
1 of 25 flags setnv:62035
0123456789101112131415161718192021222324
3: Set only on AT&T's network, always with Call Manager flag 12. The modem checks it in its geo-MCC attach logic, alongside a home-network check (medium confidence)

pri (3)

Legacy NV item list =
Legacy NV items the modem may take from this file; with a value here: 62012, 6850, 3461, 62005, 62035.pri:nv-list
NV path schema index =
302 NV paths the PRI format knows (MAVZ); not overrides.pri:schema
pri:9fa710 = 178
Unidentified field, 1 time, 2 bytes: small binary blob that precedes the NV item list.
Modem defaults this file replaces

Files the package ships at the EFS paths this bundle's .der.pri writes.

EFS pathPackage copy
/policyman/carrier_policy.xmlbbcfg.mbn P1P2P3P4P5P6P7P8P9P10P11P12P13P15 Compare
/policyman/5g_sa_allowed_on_ndds.xmlbbcfg.mbn P1P4P5P6P7 Compare