carrier-explode Explode and decode carrier data GitHub About
 TMobile_Boost_US

overrides_D93_D94_D47_D48.der.pri Modem package.

Header
Written forQualcomm modem
PRI Revision1.2.163
Settings (59)

efs:/data (1)

APM ruleslikely = "APN_String:boost.data; ATTACH_TYPE_RULES:TRUE; P-CSCFRequired:4; IPAddressRequired:5; DNSAddressRequired:4; P-CSCF_OR_DNSAddressRequired:4; ON_DEMAND_TYPE_RULES:TRUE; P-CSCFRequired:4; IPAddressRequired:5; DNSAddressRequired:4; P-CSCF_OR_DNSAddressRequired:4; "
Attach PDN Manager rules (which PDN is required for attach)efs:/data/ds_dsd_apm_rules.txt

efs:/nv/item_files/ims (2)

IMS enable = 2
Enables the IMS task (VoLTE, VoWiFi, SMS over IMS)efs:/nv/item_files/ims/IMS_enable
IMS media service configunverified =
IMS media (codec/RTP) service config; no public schemaefs:/nv/item_files/ims/media_service_config

efs:/nv/item_files/modem/data/3gpp/ps (1)

3gpp_rel_versionlikely = 5
3GPP release: Signalled 3GPP releaseefs:/nv/item_files/modem/data/3gpp/ps/3gpp_rel_version

efs:/nv/item_files/modem/lte/rrc (1)

PC2 whitelistunverified =
Bands allowed Power Class 2 (26 dBm)efs:/nv/item_files/modem/lte/rrc/PC2_WHITELIST.xml

efs:/nv/item_files/modem/lte/rrc/bbq (1)

Fake eNodeB mitigationlikely = 1= On
LTE false-base-station (fake eNodeB) mitigationefs:/nv/item_files/modem/lte/rrc/bbq/bbq_mitigation

efs:/nv/item_files/modem/lte/rrc/cap (4)

max_lte_cap_sizeunverified = 7000
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/rrc/cap/max_lte_cap_size
whitelist_ca_comboslikely =
CA combo list: LTE CA / EN-DC band-combination allow/deny listefs:/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos
blacklist_ca_comboslikely =
CA combo list: LTE CA / EN-DC band-combination allow/deny listefs:/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos
whitelist_ca_combos_with_laalikely =
CA combo list: LTE CA / EN-DC band-combination allow/deny listefs:/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_laa

efs:/nv/item_files/modem/lte/rrc/efs (4)

LTE feature disablelikely =
LTE RRC capability feature-disable bitmapefs:/nv/item_files/modem/lte/rrc/efs/lte_feature_disable
LTE feature enablelikely =
LTE RRC capability feature-enable bitmap; bit list unpublishedefs:/nv/item_files/modem/lte/rrc/efs/lte_feature_enable
LTE band priority listlikely =
Prioritised band list for LFS/FFS scans (uint16 array)efs:/nv/item_files/modem/lte/rrc/efs/band_priority_list_v2
EPS fallback controlunverified = 171884591485920xfa200007530
VoNR to EPS fallback controlefs:/nv/item_files/modem/lte/rrc/efs/eps_fallback_control

efs:/nv/item_files/modem/mav (17)

LTE CA combos per PLMNlikely = 1= On
Prune the advertised LTE CA combos per PLMN from /policyman/band_combos_per_plmn.xmlefs:/nv/item_files/modem/mav/lte_ca_xml_generation
drs_ul_check_enabledlikely = 1
Dynamic RAT selection: Apple Dynamic RAT Selection (DRS): picks LTE, NSA or SA from measured throughputefs:/nv/item_files/modem/mav/drs_ul_check_enabled
drs_enablelikely = 1
Dynamic RAT selection: Apple Dynamic RAT Selection (DRS): picks LTE, NSA or SA from measured throughputefs:/nv/item_files/modem/mav/drs_enable
drs_nsa_icon_via_motionlikely = 1
Dynamic RAT selection: Apple Dynamic RAT Selection (DRS): picks LTE, NSA or SA from measured throughputefs:/nv/item_files/modem/mav/drs_nsa_icon_via_motion
drs_sa_cov_band_area_configlikely =
Dynamic RAT selection: Apple Dynamic RAT Selection (DRS): picks LTE, NSA or SA from measured throughputefs:/nv/item_files/modem/mav/drs_sa_cov_band_area_config
drs_starting_ratlikely = 2
Dynamic RAT selection: Apple Dynamic RAT Selection (DRS): picks LTE, NSA or SA from measured throughputefs:/nv/item_files/modem/mav/drs_starting_rat
No mmWave for FaceTime videolikely = 1= On
Drop mmWave (FR2) during FaceTime video callsefs:/nv/item_files/modem/mav/disable_mmw_for_ftv
Disable SA on null SUCIlikely = 1= On
Turn off 5G SA when the SUCI uses the null protection scheme (SUPI sent unconcealed)efs:/nv/item_files/modem/mav/mav_disable_sa_if_null_suci
Drop EN-DC in call hysteresislikely = 15
Hysteresis timer before dropping EN-DC during a callefs:/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_val
Drop EN-DC in VoLTE hysteresislikely = 15
Hysteresis timer before dropping EN-DC during a VoLTE callefs:/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_volte_val
BWP switch on screen locklikely = 1= On
Move to a narrower NR bandwidth part while the screen is lockedefs:/nv/item_files/modem/mav/enable_bwp_switching_screen_lock
enable_fblte_based_bwp_configunverified = 1
Apple modem option: Apple-only (Maverick) modem option; undocumentedefs:/nv/item_files/modem/mav/enable_fblte_based_bwp_config
enable_fr1_scell_vrlfunverified = 1
Apple modem option: Apple-only (Maverick) modem option; undocumentedefs:/nv/item_files/modem/mav/enable_fr1_scell_vrlf
EN-DC combos per PLMNlikely = 1= On
Same per-PLMN capability pruning for EN-DC combos (next to cap_prune, skip_cap_prune)efs:/nv/item_files/modem/mav/endc_ca_file_generation
SA coverage bandslikely = "G"
NR bands that count as 5G SA coverage (uint8 band numbers, zero-padded)efs:/nv/item_files/modem/mav/mav_sa_coverage_band_list
sa_depri_td_bwp_thresh_vallikely = 30
Smart data mode: Apple SDM: turns NR / SA off or deprioritises SA when it does not pay offefs:/nv/item_files/modem/mav/sa_depri_td_bwp_thresh_val
sa_depri_bw_vallikely = 4
Smart data mode: Apple SDM: turns NR / SA off or deprioritises SA when it does not pay offefs:/nv/item_files/modem/mav/sa_depri_bw_val

efs:/nv/item_files/modem/mmode (4)

SMS domain preference listunverified =
Per-RAT/PLMN SMS domain list; layout not publicefs:/nv/item_files/modem/mmode/sms_domain_pref_list
SMS domain preference = 1= PS (IMS) SMS preferred
SMS over IMS preferenceefs:/nv/item_files/modem/mmode/sms_domain_pref
Voice domain preference = 3= IMS PS voice preferred
E-UTRAN voice domain (TS 24.301 9.9.3.44)efs:/nv/item_files/modem/mmode/voice_domain_pref
NR5G disable modeunverified = 0= NR5G enabled
Disables NR5G SA and/or NSAefs:/nv/item_files/modem/mmode/nr5g_disable_mode

efs:/nv/item_files/modem/nas (6)

hplmn_rat_order_ctrlunverified = 2
NAS setting: NAS mobility management / PLMN selectionefs:/nv/item_files/modem/nas/hplmn_rat_order_ctrl
mav_pssi_reg_unblock_hplmn_max_reg_failurelikely = 1
PSSI registration rule: Apple PLMN search / system-selection (PSSI) registration tuningefs:/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_max_reg_failure
mav_pssi_reg_unblock_hplmn_voice_not_avail_based_on_motion_stlikely = 1
PSSI registration rule: Apple PLMN search / system-selection (PSSI) registration tuningefs:/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_voice_not_avail_based_on_motion_st
HPLMN RAT orderlikely = NR > LTE > WCDMA > GSM
Home-PLMN RAT search order: uint16 count, then sys_sys_mode RATsefs:/nv/item_files/modem/nas/hplmn_rat_order
SRVCC support = 1= On
SRVCC capability indication from E-UTRAN to UTRAN (TS 23.216)efs:/nv/item_files/modem/nas/nas_srvcc_support
mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdbunverified = 4
Apple modem option: Apple-only (Maverick) modem option; undocumentedefs:/nv/item_files/modem/nas/mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdb

efs:/nv/item_files/modem/nr5g/rrc (2)

endc_whitelist_ca_comboslikely =
CA combo list: LTE CA / EN-DC band-combination allow/deny listefs:/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos
nrsa_whitelist_ca_comboslikely =
CA combo list: LTE CA / EN-DC band-combination allow/deny listefs:/nv/item_files/modem/nr5g/rrc/nrsa_whitelist_ca_combos

efs:/nv/item_files/modem/nr5g/RRC (7)

NR band capabilitylikely =
NR band feature-capability list; proprietary layoutefs:/nv/item_files/modem/nr5g/RRC/cap_feature_band_nr
cap_csi_rs_32_port_controllikely =
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_csi_rs_32_port_control
cap_control_nrca_3x_f_plus_t_band_comboslikely = 168430090x1010101
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_3x_f_plus_t_band_combos
cap_control_nrca_f_plus_f_band_comboslikely = 257
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_f_band_combos
cap_control_nrca_f_plus_t_band_comboslikely = 1
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_t_band_combos
NR TDD+FDD combo controllikely = 7
Enables NR-CA/NR-DC TDD+FDD band-combo classesefs:/nv/item_files/modem/nr5g/RRC/cap_control_t_plus_f_band_combos
cap_control_nrca_t_plus_t_band_comboslikely = 257
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_t_plus_t_band_combos

efs:/nv/item_files/modem/qmi/cat (1)

Block SMS-PP envelopelikely = 0= Off
Block SIM Toolkit SMS-PP (data download) envelopes, per subscriptionefs:/nv/item_files/modem/qmi/cat/qmi_cat_block_sms_pp_env_per_sub

efs:/policyman (1)

Carrier policylikely =
PolicyMan rules keyed on MCC/PLMN: RAT capability, RF bands, UE modeefs:/policyman/carrier_policy.xml

nv (4)

PRI revision = 10682881= 1.2.1630xa30201
Packed PRI Revision headernv:62005
AAGPS Positioning Modes Supportedlikely = 1065
nv:1920
Delay RAU during CSFB (probable)unverified = 0= Off
nv:62025
Call Manager Feature Group
1 of 25 flags setnv:62012
0123456789101112131415161718192021222324
20: Set for every iPhone from iPhone 14, and on older iPhones only by carriers that have shut down 3G; likely the newer form of flag 14

pri (3)

Legacy NV item list =
Legacy NV items the modem may take from this file; with a value here: 62012, 1920, 62025, 62005.pri:nv-list
NV path schema index =
322 NV paths the PRI format knows (MAVZ); not overrides.pri:schema
pri:9fa710 = 178
Unidentified field, 1 time, 2 bytes: small binary blob that precedes the NV item list.
Band combos

What the iOS 26.0.1 Qualcomm X71M · Mav24 package advertises on this carrier's networks.

TMO MVNO on 310-160 310-200 310-210 310-220 310-230 310-240 310-250 310-260 310-270 310-310 310-490 310-660 310-800 311-660 311-882
PlatformsCombosEN-DCNRLTENR-DCMax CCNR bandsLTE anchors
P1P4P5P6P7 29779218005n25 n41 n66 n71 n77
FR2 n258 n260 n261		B2 B12 B48 B66 B71
Modem defaults this file replaces

Files the package ships at the EFS paths this bundle's .der.pri writes.

EFS pathPackage copy
/policyman/carrier_policy.xmlbbcfg.mbn P1P4P5P6P7 Compare

1 more XML values set paths the package leaves unset.