carrier-explode Explode and decode carrier data GitHub About
VerizonVerizon_LTE_US
iOS 27.2 beta 3 image · build 73.0 beta iOS 27.2 beta 1–2 image · build 72.7.2 beta iOS 27.0 – 27.0.1 image · build 72.0.1 current release iOS 27.0 beta 5–8 image · build 72.0.1 beta iOS 27.0 beta 4 image · build 71.5.46 beta iOS 27.0 beta 3 image · build 71.5.41 beta iOS 27.0 beta 2 image · build 71.5.40 beta iOS 27.0 beta image · build 71.5.32 beta iOS 26.5 – 26.6.2 image · build 70.0 iOS 26.5.1 image · build 70.0 OTA iOS 26.4+ · build 69.1.0 iOS 26.4 – 26.4.2 image · build 69.0.2 iOS 26.3.1 image · build 68.0 iOS 26.3 image · build 68.0 iOS 26.2 – 26.2.1 image · build 67.0 iOS 26.1 image · build 66.0 iOS 26.0 – 26.0.1 image · build 65.0 iOS 26.0 image · build 65.0 iOS 18.6 – 18.6.2 image · build 64.0.1 iOS 18.5 image · build 64.0 iOS 18.4 – 18.4.1 image · build 63.0 iOS 18.3.1 – 18.3.2 image · build 62.0 iOS 18.3 – 18.3.2 image · build 62.0 OTA iOS 18.2+ · build 61.1 iOS 18.2 – 18.2.1 image · build 61.0 iOS 18.1 – 18.1.1 image · build 60.0 iOS 18.0 – 18.0.1 image · build 59.0 OTA iOS 17.0+ · build 55.1 OTA iOS 13.4+ · build 41.1 OTA iOS 12.0+ · build 33.1 OTA iOS 11.2+ · build 31.1 OTA iOS 11.1+ · build 30.1 OTA iOS 11.0+ · build 29.2 OTA iOS 10.3+ · build 28.4 OTA iOS 10.2+ · build 27.2 OTA iOS 10.1+ · build 26.2 OTA iOS 10.0+ · build 25.2 OTA iOS 9.3+ · build 24.1 OTA iOS 9.2+ · build 23.2 OTA iOS 9.1+ · build 22.1 OTA iOS 9.0+ · build 21.1 OTA iOS 8.3+ · build 19.1 OTA iOS 8.1+ · build 18.1 OTA iOS 6.1+ · build 14.1 OTA iOS 6.0+ · build 13.1

overrides_D93_D94_D47_D48.der.pri Modem package.

Header
DialectQualcomm
PRI Revision0.1.167
Settings (97)

efs:/data (1)

APM rules = "APN_String:ims; ATTACH_TYPE_RULES:TRUE; P-CSCFRequired:2; IPAddressRequired:2; ON_DEMAND_TYPE_RULES:TRUE; P-CSCFRequired:2; IPAddressRequired:2; APN_String:vzwinternet; ATTACH_TYPE_RULES:TRUE; P-CSCFRequired:4; IPAddressRequired:5; ON_DEMAND_TYPE_RULES:TRUE; P-CSCFRequired:4; IPAddressRequired:5; "
Attach PDN Manager rules (which PDN is required for attach)efs:/data/ds_dsd_apm_rules.txt

efs:/data/3gpp (1)

3GPP data dynamic config =
Per-PLMN data rules, domestic/international roaming PLMN listsefs:/data/3gpp/data_3gpp_dynamic_config.xml

efs:/data/3gpp/throttling (1)

srv_req_throt_config.txtunverified = "FAILURE_TIMER_1:0; FAILURE_TIMER_2:0; FAILURE_TIMER_3:30; FAILURE_TIMER_4:30; FAILURE_TIMER_5:30; FAILURE_TIMER_6:30; "
Data services setting: Data services (PDN, throttling, AT commands)efs:/data/3gpp/throttling/srv_req_throt_config.txt

efs:/nv/item_files/gps/cgps/sm (1)

gnss_text_to_emergency_windowunverified = 600
GNSS setting: GNSS / locationefs:/nv/item_files/gps/cgps/sm/gnss_text_to_emergency_window

efs:/nv/item_files/ims (2)

IMS enable = 2
Enables the IMS task (VoLTE, VoWiFi, SMS over IMS)efs:/nv/item_files/ims/IMS_enable
IMS media service configunverified =
IMS media (codec/RTP) service config; no public schemaefs:/nv/item_files/ims/media_service_config

efs:/nv/item_files/modem/data/3gpp/ps (5)

Rel-10 throttling = 1= On
Rel-10 APN congestion back-off (T3396)efs:/nv/item_files/modem/data/3gpp/ps/rel_10_throttling
rel_10_throttling_per_plmnunverified = 1
Data services setting: Data services (PDN, throttling, AT commands)efs:/nv/item_files/modem/data/3gpp/ps/rel_10_throttling_per_plmn
set_volte_call_typeunverified = 1
Data services setting: Data services (PDN, throttling, AT commands)efs:/nv/item_files/modem/data/3gpp/ps/set_volte_call_type
Allow infinite throttle = 1= On
Allow an infinite throttle timerefs:/nv/item_files/modem/data/3gpp/ps/allow_infinite_throt
Service request throttle behaviour = 0
Service-request throttling behaviourefs:/nv/item_files/modem/data/3gpp/ps/ser_req_throttle_behavior

efs:/nv/item_files/modem/data/epc (1)

PDN throttling config = "FAILURE_TIMER_1:0; FAILURE_TIMER_2:0; FAILURE_TIMER_3:60; FAILURE_TIMER_4:120; FAILURE_TIMER_5:480; FAILURE_TIMER_6:900; DISALLOW_TIMER_1:0; DISALLOW_TIMER_2:0; DISALLOW_TIMER_3:60; DISALLOW_TIMER_4:120; DISALLOW_TIMER_5:480; DISALLOW_TIMER_6:900; "
Carrier PDN throttling timersefs:/nv/item_files/modem/data/epc/pdn_throttling_config.txt

efs:/nv/item_files/modem/lte/L2/mac (1)

lte_mac_enable_aasunverified = 42782558730xff010101
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/L2/mac/lte_mac_enable_aas

efs:/nv/item_files/modem/lte/ML1 (2)

ard_configunverified =
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/ML1/ard_config
traffic_forced_r1unverified = 0
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/ML1/traffic_forced_r1

efs:/nv/item_files/modem/lte/rrc/bbq (1)

Fake eNodeB mitigation = 1= On
LTE false-base-station (fake eNodeB) mitigationefs:/nv/item_files/modem/lte/rrc/bbq/bbq_mitigation

efs:/nv/item_files/modem/lte/rrc/cap (6)

whitelist_ca_combos =
CA combo list: LTE CA / EN-DC band-combination allow/deny listefs:/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos
blacklist_ca_combos =
CA combo list: LTE CA / EN-DC band-combination allow/deny listefs:/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos
blacklist_explicit_ca_combos =
CA combo list: LTE CA / EN-DC band-combination allow/deny listefs:/nv/item_files/modem/lte/rrc/cap/blacklist_explicit_ca_combos
LTE bands without non-contiguous CA = B5 B48
LTE bands left out of non-contiguous intra-band CA combosefs:/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos_with_nc_combos
whitelist_ca_combos_with_laa =
CA combo list: LTE CA / EN-DC band-combination allow/deny listefs:/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_laa
LTE bands with UL CA = B2 B5 B13 B66
LTE bands allowed in uplink carrier-aggregation combosefs:/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_ulca

efs:/nv/item_files/modem/lte/rrc/efs (7)

LTE feature enable =
LTE RRC capability feature-enable bitmap; bit list unpublishedefs:/nv/item_files/modem/lte/rrc/efs/lte_feature_enable
disable_4l_per_bandunverified =
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/rrc/efs/disable_4l_per_band
LTE band priority list =
Prioritised band list for LFS/FFS scans (uint16 array)efs:/nv/item_files/modem/lte/rrc/efs/band_priority_list_v2
csg_control_v2unverified =
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/rrc/efs/csg_control_v2
lte_rrc_sub_feature_enableunverified =
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/rrc/efs/lte_rrc_sub_feature_enable
conn_rej_cell_depriority_paramsunverified =
LTE setting: LTE RRC / L1 / L2efs:/nv/item_files/modem/lte/rrc/efs/conn_rej_cell_depriority_params
EPS fallback controlunverified = 171884591485920xfa200007530
VoNR to EPS fallback controlefs:/nv/item_files/modem/lte/rrc/efs/eps_fallback_control

efs:/nv/item_files/modem/mav (12)

LTE CA combos per PLMN = 1= On
Prune the advertised LTE CA combos per PLMN from /policyman/band_combos_per_plmn.xmlefs:/nv/item_files/modem/mav/lte_ca_xml_generation
Drop EN-DC in call hysteresis = 25
Hysteresis timer before dropping EN-DC during a callefs:/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_val
Drop EN-DC in VoLTE hysteresis = 25
Hysteresis timer before dropping EN-DC during a VoLTE callefs:/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_volte_val
enable_fblte_based_bwp_configunverified = 1
Apple modem option: Apple-only (Maverick) modem option; undocumentedefs:/nv/item_files/modem/mav/enable_fblte_based_bwp_config
enable_rlgs_fr2 = 0
RLGS congestion: Radio-link congestion scoring (none / low / med / high, DL and UL)efs:/nv/item_files/modem/mav/enable_rlgs_fr2
mav_dmc_enabledunverified = 1
Apple modem option: Apple-only (Maverick) modem option; undocumentedefs:/nv/item_files/modem/mav/mav_dmc_enabled
sa_depri_td_bwp_thresh_val = 30
Smart data mode: Apple SDM: turns NR / SA off or deprioritises SA when it does not pay offefs:/nv/item_files/modem/mav/sa_depri_td_bwp_thresh_val
volte_screen_on_hysteresis_tmr_valunverified = 2
Apple modem option: Apple-only (Maverick) modem option; undocumentedefs:/nv/item_files/modem/mav/volte_screen_on_hysteresis_tmr_val
mav_avoid_uwb_roaming = 1
5G icon rule: Status-bar 5G / 5G UW / 5G UC / 5G+ icon override logicefs:/nv/item_files/modem/mav/mav_avoid_uwb_roaming
mav_monitor_mm_mb_replace_nr5g_with_nr5guwb = 1
5G icon rule: Status-bar 5G / 5G UW / 5G UC / 5G+ icon override logicefs:/nv/item_files/modem/mav/mav_monitor_mm_mb_replace_nr5g_with_nr5guwb
Skip SMS-only indication on SA = 1= On
Do not send the SMS-only / IMS-preference indication while on 5G SAefs:/nv/item_files/modem/mav/mav_skip_sms_only_ims_pref_ind_on_sa
vzw_pco_checkunverified = 1
Apple modem option: Apple-only (Maverick) modem option; undocumentedefs:/nv/item_files/modem/mav/vzw_pco_check

efs:/nv/item_files/modem/maverick/uim/apps (1)

SIM provisioning strategy = 2
How the modem provisions the SIM: proprietary, MSISDN-based or 3GPP follower; value order unconfirmedefs:/nv/item_files/modem/maverick/uim/apps/card_prov_strategy

efs:/nv/item_files/modem/mmode (13)

UE usage setting = 0= Voice centric
TS 24.301 UE usage settingefs:/nv/item_files/modem/mmode/ue_usage_setting
Voice domain preference = 3= IMS PS voice preferred
E-UTRAN voice domain (TS 24.301 9.9.3.44)efs:/nv/item_files/modem/mmode/voice_domain_pref
ims_reg_status_wait_timerunverified = 120
Multimode setting: Call manager / system determinationefs:/nv/item_files/modem/mmode/ims_reg_status_wait_timer
SMS domain preference listunverified =
Per-RAT/PLMN SMS domain list; layout not publicefs:/nv/item_files/modem/mmode/sms_domain_pref_list
mav_volte_disable_ims_reg_wait_timer_hplmnunverified = 1
Apple modem option: Apple-only (Maverick) modem option; undocumentedefs:/nv/item_files/modem/mmode/mav_volte_disable_ims_reg_wait_timer_hplmn
max_ims_reg_attempt_timerunverified = 120
Multimode setting: Call manager / system determinationefs:/nv/item_files/modem/mmode/max_ims_reg_attempt_timer
ssac_hvolteunverified =
Multimode setting: Call manager / system determinationefs:/nv/item_files/modem/mmode/ssac_hvolte
buffer_ims_pref_change_timerunverified = 60
Multimode setting: Call manager / system determinationefs:/nv/item_files/modem/mmode/buffer_ims_pref_change_timer
LTE disable duration = 900
How long LTE stays disabled when CS services are unavailableefs:/nv/item_files/modem/mmode/lte_disable_duration
nrdc_modeunverified = 1
Multimode setting: Call manager / system determinationefs:/nv/item_files/modem/mmode/nrdc_mode
nr5g_plmn_blocking_timerunverified = 42949680160x1000002d0
Multimode setting: Call manager / system determinationefs:/nv/item_files/modem/mmode/nr5g_plmn_blocking_timer
NR5G disable modeunverified = 0= NR5G enabled
Disables NR5G SA and/or NSAefs:/nv/item_files/modem/mmode/nr5g_disable_mode
lte_rpm_info_2unverified =
Multimode setting: Call manager / system determinationefs:/nv/item_files/modem/mmode/lte_rpm_info_2

efs:/nv/item_files/modem/mmode/sd (1)

e911_prioritize_csunverified = 0
Multimode setting: Call manager / system determinationefs:/nv/item_files/modem/mmode/sd/e911_prioritize_cs

efs:/nv/item_files/modem/nas (10)

hplmn_rat_order_ctrlunverified = 2
NAS setting: NAS mobility management / PLMN selectionefs:/nv/item_files/modem/nas/hplmn_rat_order_ctrl
mav_pssi_reg_unblock_hplmn_max_reg_failure = 1
PSSI registration rule: Apple PLMN search / system-selection (PSSI) registration tuningefs:/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_max_reg_failure
mav_pssi_reg_unblock_hplmn_ims_reg_failure_timer = 120
PSSI registration rule: Apple PLMN search / system-selection (PSSI) registration tuningefs:/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_ims_reg_failure_timer
mav_pssi_reg_unblock_hplmn_voice_not_avail_based_on_motion_st = 1
PSSI registration rule: Apple PLMN search / system-selection (PSSI) registration tuningefs:/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_voice_not_avail_based_on_motion_st
HPLMN RAT order = NR > LTE > WCDMA > GSM
Home-PLMN RAT search order: uint16 count, then sys_sys_mode RATsefs:/nv/item_files/modem/nas/hplmn_rat_order
Temporary FPLMN backoff time = 42949672950xffffffff
EMM temporary-forbidden-PLMN backoff timer; 0xffffffff = disabledefs:/nv/item_files/modem/nas/lte_nas_temp_fplmn_backoff_time
mav_pssi_reg_follow_rplmn_rat_order_power_up = 1
PSSI registration rule: Apple PLMN search / system-selection (PSSI) registration tuningefs:/nv/item_files/modem/nas/mav_pssi_reg_follow_rplmn_rat_order_power_up
nr_disable_durationunverified = 0
NAS setting: NAS mobility management / PLMN selectionefs:/nv/item_files/modem/nas/nr_disable_duration
nr_t3517_configunverified = 5
NAS setting: NAS mobility management / PLMN selectionefs:/nv/item_files/modem/nas/nr_t3517_config
ignore_uplmnunverified = 1
NAS setting: NAS mobility management / PLMN selectionefs:/nv/item_files/modem/nas/ignore_uplmn

efs:/nv/item_files/modem/nas/mav_hpplmn_scan_throttler (1)

config_paramsunverified =
NAS setting: NAS mobility management / PLMN selectionefs:/nv/item_files/modem/nas/mav_hpplmn_scan_throttler/config_params

efs:/nv/item_files/modem/nr5g/ML1 (1)

srch_conn_ttt_shortunverified =
NR5G setting: NR5G RRC / L1efs:/nv/item_files/modem/nr5g/ML1/srch_conn_ttt_short

efs:/nv/item_files/modem/nr5g/RRC (13)

cap_control_4cc_ulca_fr2 = 1
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_control_4cc_ulca_fr2
NR band capability =
NR band feature-capability list; proprietary layoutefs:/nv/item_files/modem/nr5g/RRC/cap_feature_band_nr
band_priority_listunverified =
NR5G setting: NR5G RRC / L1efs:/nv/item_files/modem/nr5g/RRC/band_priority_list
cap_csi_rs_32_port_control =
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_csi_rs_32_port_control
cap_control_dl_256qam = 257
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_control_dl_256qam
failure_mgr_efs_nrdc_list_cfgunverified =
NR5G setting: NR5G RRC / L1efs:/nv/item_files/modem/nr5g/RRC/failure_mgr_efs_nrdc_list_cfg
cap_control_nrca_3x_f_plus_t_band_combos = 168430090x1010101
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_3x_f_plus_t_band_combos
cap_control_nrca_4x_f_plus_t_band_combos = 657920x10100
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_4x_f_plus_t_band_combos
cap_control_nrca_f_plus_f_band_combos = 257
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_f_band_combos
cap_control_nrca_f_plus_t_band_combos = 1
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_f_plus_t_band_combos
NR TDD+FDD combo control = 7
Enables NR-CA/NR-DC TDD+FDD band-combo classesefs:/nv/item_files/modem/nr5g/RRC/cap_control_t_plus_f_band_combos
cap_control_nrca_t_plus_t_band_combos = 657930x10101
NR band-combo class control: Enables an NR-CA / NR-DC / MR-DC band-combination class in the UE capabilityefs:/nv/item_files/modem/nr5g/RRC/cap_control_nrca_t_plus_t_band_combos
cap_disable_ul_256qam = 1
NR UE capability: NR RRC UE-capability toggleefs:/nv/item_files/modem/nr5g/RRC/cap_disable_ul_256qam

efs:/nv/item_files/modem/qmi/cat (1)

Block SMS-PP envelope = 0= Off
Block SIM Toolkit SMS-PP (data download) envelopes, per subscriptionefs:/nv/item_files/modem/qmi/cat/qmi_cat_block_sms_pp_env_per_sub

efs:/nv/item_files/modem/uim/gstk (2)

feature_bmask_2__mav_overrideunverified = 260
Apple override: Apple override of the Qualcomm item of the same nameefs:/nv/item_files/modem/uim/gstk/feature_bmask_2__mav_override
feature_bmask__mav_overrideunverified = 256
Apple override: Apple override of the Qualcomm item of the same nameefs:/nv/item_files/modem/uim/gstk/feature_bmask__mav_override

efs:/nv/item_files/wcdma/rrc (1)

Fast return to LTE after CSFB = 1= On
Return from WCDMA to LTE right after a CSFB callefs:/nv/item_files/wcdma/rrc/wcdma_rrc_fast_return_to_lte_after_csfb

efs:/policyman (1)

Carrier policy =
PolicyMan rules keyed on MCC/PLMN: RAT capability, RF bands, UE modeefs:/policyman/carrier_policy.xml

nv (8)

HS Based Plus Dial Setting = 1
nv:4960
Roaming preference = 255= Automatic
Roaming Preferencenv:442
PRI revision = 10944768= 0.1.1670xa70100
Packed PRI Revision headernv:62005
AAGPS Positioning Modes Supported = 1321
nv:1920
CGPS UMTS PDE Server Address URL = "e-slp.lte.911.nj.myvzw.com:7275"
SUPL H-SLP server host:portnv:4703
AAGPS Use Transport Security = 1= On
Enable user-plane (SUPL) secure transportnv:3758
GNSS SUPL Version = 131072= 2.0.00x20000
nv:6792
MGRF Supported = 1
nv:5895

pri (3)

Legacy NV item list =
Legacy NV items the modem may take from this file; with a value here: 4960, 442, 1920, 5895, 4703, 6792, 3758, 62005.pri:nv-list
NV path schema index =
317 NV paths the PRI format knows (MAVZ); not overrides.pri:schema
pri:9fa710 = 178
Unidentified field, 1 time, 2 bytes: small binary blob that precedes the NV item list.
Band combos

What the iOS 18.3.2 Qualcomm X71M · Mav24 package advertises on this carrier's networks.

VZW default bundle on 311-480 311-481 311-482 311-483 311-484 311-485 311-486 311-487 311-488 311-489
PlatformsCombosEN-DCNRLTENR-DCMax CCNR bandsLTE anchors
P1P4P5P6P7 3421751670326n2 n5 n48 n66 n77
FR2 n260 n261		B2 B5 B13 B48 B66
Modem defaults this file replaces

Files the package ships at the EFS paths this bundle's .der.pri writes.

EFS pathPackage copy
/policyman/carrier_policy.xmlbbcfg.mbn P1P4P5P6P7 Compare
/data/3gpp/data_3gpp_dynamic_config.xmlbbcfg.mbn P1P4P5P6P7 Compare