carrier-explode Explode and decode carrier data GitHub About
792
VerizonVerizon_LTE_US
iOS 27.2 beta 3–4 image · build 73.0 beta iOS 27.2 beta 1–2 image · build 72.7.2 beta iOS 27.0 – 27.0.1 image · build 72.0.1 current release iOS 27.0 beta 5–8 image · build 72.0.1 beta iOS 27.0 beta 4 image · build 71.5.46 beta iOS 27.0 beta 3 image · build 71.5.41 beta iOS 27.0 beta 2 image · build 71.5.40 beta iOS 27.0 beta image · build 71.5.32 beta iOS 26.5 – 26.6.2 image · build 70.0 iOS 26.5.1 image · build 70.0 OTA iOS 26.4+ · build 69.1.0 iOS 26.4 – 26.4.2 image · build 69.0.2 iOS 26.3.1 image · build 68.0 iOS 26.3 image · build 68.0 iOS 26.2 – 26.2.1 image · build 67.0 iOS 26.1 image · build 66.0 iOS 26.0 – 26.0.1 image · build 65.0 iOS 26.0 image · build 65.0 iOS 18.6 – 18.6.2 image · build 64.0.1 iOS 18.5 image · build 64.0 iOS 18.4 – 18.4.1 image · build 63.0 iOS 18.3.1 – 18.3.2 image · build 62.0 iOS 18.3 – 18.3.2 image · build 62.0 OTA iOS 18.2+ · build 61.1 iOS 18.2 – 18.2.1 image · build 61.0 iOS 18.1 – 18.1.1 image · build 60.0 iOS 18.0 – 18.0.1 image · build 59.0 OTA iOS 17.0+ · build 55.1 OTA iOS 13.4+ · build 41.1 OTA iOS 12.0+ · build 33.1 OTA iOS 11.2+ · build 31.1 OTA iOS 11.1+ · build 30.1 OTA iOS 11.0+ · build 29.2 OTA iOS 10.3+ · build 28.4 OTA iOS 10.2+ · build 27.2 OTA iOS 10.1+ · build 26.2 OTA iOS 10.0+ · build 25.2 OTA iOS 9.3+ · build 24.1 OTA iOS 9.2+ · build 23.2 OTA iOS 9.1+ · build 22.1 OTA iOS 9.0+ · build 21.1 OTA iOS 8.3+ · build 19.1 OTA iOS 8.1+ · build 18.1 OTA iOS 6.1+ · build 14.1 OTA iOS 6.0+ · build 13.1
overrides_D52g_D53g_D53p_D54p.der.pri
iPhone 12 mini, iPhone 12, iPhone 12 Pro, iPhone 12 Pro Max
Header
DialectQualcomm
PRI Revision1.2.224
Settings (62)

efs:/data (1)

APM rules = "APN_String:ims; ATTACH_TYPE_RULES:TRUE; P-CSCFRequired:2; IPAddressRequired:2; ON_DEMAND_TYPE_RULES:TRUE; P-CSCFRequired:2; IPAddressRequired:2; APN_String:vzwinternet; ATTACH_TYPE_RULES:TRUE; P-CSCFRequired:4; IPAddressRequired:5; ON_DEMAND_TYPE_RULES:TRUE; P-CSCFRequired:4; IPAddressRequired:5; "
Attach PDN Manager rules (which PDN is required for attach)efs:/data/ds_dsd_apm_rules.txt

efs:/data/3gpp (1)

3GPP data dynamic config =
Per-PLMN data rules, domestic/international roaming PLMN listsefs:/data/3gpp/data_3gpp_dynamic_config.xml

efs:/data/3gpp/throttling (1)

srv_req_throt_config.txtunverified = "FAILURE_TIMER_1:0; FAILURE_TIMER_2:0; FAILURE_TIMER_3:60; FAILURE_TIMER_4:120; FAILURE_TIMER_5:480; FAILURE_TIMER_6:900; "
Data services setting: Data services (PDN, throttling, AT commands)efs:/data/3gpp/throttling/srv_req_throt_config.txt

efs:/nv/item_files/ims (2)

IMS enable = 2
Enables the IMS task (VoLTE, VoWiFi, SMS over IMS)efs:/nv/item_files/ims/IMS_enable
IMS media service configunverified =
IMS media (codec/RTP) service config; no public schemaefs:/nv/item_files/ims/media_service_config

efs:/nv/item_files/modem/data/3gpp/ps (4)

Rel-10 throttling = 1= On
Rel-10 APN congestion back-off (T3396)efs:/nv/item_files/modem/data/3gpp/ps/rel_10_throttling
rel_10_throttling_per_plmnunverified = 1
Data services setting: Data services (PDN, throttling, AT commands)efs:/nv/item_files/modem/data/3gpp/ps/rel_10_throttling_per_plmn
Allow infinite throttle = 1= On
Allow an infinite throttle timerefs:/nv/item_files/modem/data/3gpp/ps/allow_infinite_throt
Service request throttle behaviour = 0
Service-request throttling behaviourefs:/nv/item_files/modem/data/3gpp/ps/ser_req_throttle_behavior

efs:/nv/item_files/modem/data/dsmgr (1)

pdu_session_id_inclusionunverified = 0
Data services setting: Data services (PDN, throttling, AT commands)efs:/nv/item_files/modem/data/dsmgr/pdu_session_id_inclusion

efs:/nv/item_files/modem/data/epc (1)

PDN throttling config = "FAILURE_TIMER_1:0; FAILURE_TIMER_2:0; FAILURE_TIMER_3:60; FAILURE_TIMER_4:120; FAILURE_TIMER_5:480; FAILURE_TIMER_6:900; DISALLOW_TIMER_1:0; DISALLOW_TIMER_2:0; DISALLOW_TIMER_3:60; DISALLOW_TIMER_4:120; DISALLOW_TIMER_5:480; DISALLOW_TIMER_6:900; "
Carrier PDN throttling timersefs:/nv/item_files/modem/data/epc/pdn_throttling_config.txt

efs:/nv/item_files/modem/lte/L2/mac (1)

lte_mac_enable_aasunverified = 42782558730xff010101
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/L2/mac/lte_mac_enable_aas

efs:/nv/item_files/modem/lte/rrc/bbq (1)

Fake eNodeB mitigation = 1= On
LTE false-base-station (fake eNodeB) mitigationefs:/nv/item_files/modem/lte/rrc/bbq/bbq_mitigation

efs:/nv/item_files/modem/lte/rrc/cap (3)

blacklist_ca_combos =
CA combo list: LTE CA / EN-DC band-combination allow/deny listefs:/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos
whitelist_ca_combos_with_laa =
CA combo list: LTE CA / EN-DC band-combination allow/deny listefs:/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_laa
LTE bands with UL CA = B2 B5 B13 B66
LTE bands allowed in uplink carrier-aggregation combosefs:/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_ulca

efs:/nv/item_files/modem/lte/rrc/efs (6)

disable_4l_per_bandunverified =
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/rrc/efs/disable_4l_per_band
LTE band priority list =
Prioritised band list for LFS/FFS scans (uint16 array)efs:/nv/item_files/modem/lte/rrc/efs/band_priority_list_v2
LTE feature enable =
LTE RRC capability feature-enable bitmap; bit list unpublishedefs:/nv/item_files/modem/lte/rrc/efs/lte_feature_enable
csg_control_v2unverified =
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/rrc/efs/csg_control_v2
lte_rrc_sub_feature_enableunverified =
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/rrc/efs/lte_rrc_sub_feature_enable
conn_rej_cell_depriority_paramsunverified =
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/rrc/efs/conn_rej_cell_depriority_params

efs:/nv/item_files/modem/mav (6)

LTE CA combos per PLMN = 1= On
Prune the advertised LTE CA combos per PLMN from /policyman/band_combos_per_plmn.xmlefs:/nv/item_files/modem/mav/lte_ca_xml_generation
Drop EN-DC in call hysteresis = 25
Hysteresis timer before dropping EN-DC during a callefs:/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_val
Drop EN-DC in VoLTE hysteresis = 25
Hysteresis timer before dropping EN-DC during a VoLTE callefs:/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_volte_val
EN-DC combos per PLMN = 1= On
Same per-PLMN capability pruning for EN-DC combos (next to cap_prune, skip_cap_prune)efs:/nv/item_files/modem/mav/endc_ca_file_generation
volte_screen_on_hysteresis_tmr_valunverified = 2
Apple modem option: Apple-only (Maverick) modem option; undocumentedefs:/nv/item_files/modem/mav/volte_screen_on_hysteresis_tmr_val
mav_monitor_mm_mb_replace_nr5g_with_nr5guwb = 1
5G icon rule: Status-bar 5G / 5G UW / 5G UC / 5G+ icon override logicefs:/nv/item_files/modem/mav/mav_monitor_mm_mb_replace_nr5g_with_nr5guwb

efs:/nv/item_files/modem/mmode (8)

UE usage setting = 0= Voice centric
TS 24.301 UE usage settingefs:/nv/item_files/modem/mmode/ue_usage_setting
Voice domain preference = 3= IMS PS voice preferred
E-UTRAN voice domain (TS 24.301 9.9.3.44)efs:/nv/item_files/modem/mmode/voice_domain_pref
ims_reg_status_wait_timerunverified = 120
Multimode setting: Call manager / system determinationefs:/nv/item_files/modem/mmode/ims_reg_status_wait_timer
SMS domain preference listunverified =
Per-RAT/PLMN SMS domain list; layout not publicefs:/nv/item_files/modem/mmode/sms_domain_pref_list
ssac_hvolteunverified =
Multimode setting: Call manager / system determinationefs:/nv/item_files/modem/mmode/ssac_hvolte
buffer_ims_pref_change_timerunverified = 60
Multimode setting: Call manager / system determinationefs:/nv/item_files/modem/mmode/buffer_ims_pref_change_timer
LTE disable duration = 900
How long LTE stays disabled when CS services are unavailableefs:/nv/item_files/modem/mmode/lte_disable_duration
lte_rpm_info_2unverified =
Multimode setting: Call manager / system determinationefs:/nv/item_files/modem/mmode/lte_rpm_info_2

efs:/nv/item_files/modem/nas (4)

mav_pssi_reg_unblock_hplmn_max_reg_failure = 1
PSSI registration rule: Apple PLMN search / system-selection (PSSI) registration tuningefs:/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_max_reg_failure
mav_pssi_reg_unblock_hplmn_voice_not_avail_based_on_motion_st = 1
PSSI registration rule: Apple PLMN search / system-selection (PSSI) registration tuningefs:/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_voice_not_avail_based_on_motion_st
Temporary FPLMN backoff time = 42949672950xffffffff
EMM temporary-forbidden-PLMN backoff timer; 0xffffffff = disabledefs:/nv/item_files/modem/nas/lte_nas_temp_fplmn_backoff_time
ignore_uplmnunverified = 1
NAS setting: NAS mobility management / PLMN selectionefs:/nv/item_files/modem/nas/ignore_uplmn

efs:/nv/item_files/modem/nas/mav_hpplmn_scan_throttler (1)

config_paramsunverified =
NAS setting: NAS mobility management / PLMN selectionefs:/nv/item_files/modem/nas/mav_hpplmn_scan_throttler/config_params

efs:/nv/item_files/modem/nr5g/rrc (3)

endc_whitelist_ca_combos_with_laa =
CA combo list: LTE CA / EN-DC band-combination allow/deny listefs:/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos_with_laa
endc_reduced_cc_lte_fr1_ca_combos = 517
CA combo list: LTE CA / EN-DC band-combination allow/deny listefs:/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_lte_fr1_ca_combos
endc_reduced_cc_lte_fr2_ca_combos = 514
CA combo list: LTE CA / EN-DC band-combination allow/deny listefs:/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_lte_fr2_ca_combos

efs:/nv/item_files/modem/qmi/cat (1)

Block SMS-PP envelope = 0= Off
Block SIM Toolkit SMS-PP (data download) envelopes, per subscriptionefs:/nv/item_files/modem/qmi/cat/qmi_cat_block_sms_pp_env_per_sub

efs:/nv/item_files/modem/uim/gstk (2)

mav_svc_notification_to_card_upon_restricted_mode_exit_latency_configunverified = 3932360x60014
Apple modem option: Apple-only (Maverick) modem option; undocumentedefs:/nv/item_files/modem/uim/gstk/mav_svc_notification_to_card_upon_restricted_mode_exit_latency_config
feature_bmask__mav_overrideunverified = 256
Apple override: Apple override of the Qualcomm item of the same nameefs:/nv/item_files/modem/uim/gstk/feature_bmask__mav_override

efs:/nv/item_files/wcdma/rrc (1)

Fast return to LTE after CSFB = 1= On
Return from WCDMA to LTE right after a CSFB callefs:/nv/item_files/wcdma/rrc/wcdma_rrc_fast_return_to_lte_after_csfb

nv (11)

HS Based Plus Dial Setting = 1
nv:4960
Roaming preference = 255= Automatic
Roaming Preferencenv:442
NV 62026unverified =
14-byte structnv:62026
PRI revision = 14680577= 1.2.2240xe00201
Packed PRI Revision headernv:62005
AAGPS Positioning Modes Supported = 1321
nv:1920
CGPS UMTS PDE Server Address URL = "e-slp.lte.911.nj.myvzw.com:7275"
SUPL H-SLP server host:portnv:4703
AAGPS Use Transport Security = 1= On
Enable user-plane (SUPL) secure transportnv:3758
GNSS SUPL Version = 131072= 2.0.00x20000
nv:6792
MGRF Supported = 1
nv:5895
Data Service Feature Group
1 of 25 flags setnv:62014
0123456789101112131415161718192021222324
UIM Service Feature Group
1 of 25 flags setnv:62015
0123456789101112131415161718192021222324
6: The UIM group is obsolete in the iPhone 17 modem, so it does nothing there

pri (3)

Legacy NV item list =
Legacy NV items the modem may take from this file; with a value here: 4960, 62014, 62015, 442, 1920, 62026, 5895, 4703, 6792, 3758, 62005.pri:nv-list
NV path schema index =
241 NV paths the PRI format knows (raw); not overrides.pri:schema
pri:9fa710 =
Unidentified field, 1 time, 22 bytes: small binary blob that precedes the NV item list.