For the IMX8MP, those flags are located at the following address:
```
# the BOOT_MODE register
boot_mode_bits_addr=0x30390073
```
You can find the exact address for your variant on its datasheel.
Then I just compared the values on that register to the one I'm expecting:
`cmp.b ${boot_mode_bits_addr} 0x2 1`
I compare the first byte of the content on `boot_mode_bits_addr` with `0x2`, and `test` to see if the result is 0 or 1.