yashsingh1/xdaforums huggingface dataset:
[Galaxy S II Q&A, Help & Troubleshooting] martin5mars:
This is the movie I'm trying to play with my phone.

File Type: MKV

Size: 2213.18MB

Video Size: 1920 x 1080

Length 01:01:08

Video codec: h264

Sound codec: Dolby AC3 / FAST Multimedia AG DVM

Planet Earth from BBC
[Galaxy S II Q&A, Help & Troubleshooting] Bastl79:
Try to clear data and cache from your video-app in settings > apps > runing apps > all
[Galaxy S II Q&A, Help & Troubleshooting] martin5mars:
Thanks for the advice, but it still doesn't work.

I'm wondering if there's any kind of limitation inside the new Virgin firmware or ROM that doesn't allow me to play MKV files, cause I've tried with other MKV files in 720p and this is not working either, so it's not a corrupted file or anything.

Update:

I took a look at diffrent Galaxy S2 spec from Canada and United States

Here's what I've found:

Canadian (Virgin):

Video format supported: 3GP, MP4 and WMV (unprotected)

US (AT&T):

Video format supported: 3GP, AAC, AAC+, AMRNB,AVI,eAAC+,H.263, H.264, MP4,MPEG4, QCIF, WMV; Video, Streaming

I think I'll need to unlock my phone, do you guys think it will allow me to view my files?

Thanks again
[Galaxy S II Q&A, Help & Troubleshooting] Osyx:
Have you tried MX Video player? I think it's the best videoplayer available on market and it supports almost all file extensions. ;)
[Galaxy S II Q&A, Help & Troubleshooting] bibymon:
Try mx player.. Its available in market and its free:-)

Thank me if I helped you :)
[Galaxy S II Q&A, Help & Troubleshooting] scottyang:
This software application can be the install mx video player
[Galaxy S II Q&A, Help & Troubleshooting] parazitul80:
Sometimes i have too problems playing mkv files
[Galaxy S II Q&A, Help & Troubleshooting] martin5mars:
Hi All,

I've already tried MX Player, mobo, and some others.

It can play in S/W decoder mode but its unwatchable it lags so much

Thanks again
[Galaxy S II Q&A, Help & Troubleshooting] martin5mars:
Is there something to do when you have problems with MKV files?!
[Galaxy S II Q&A, Help & Troubleshooting] parazitul80:
I didn't find a solution for that.
[HD Mini Android Development] munjeni:
Tried to get nand id with simple function executed from wifi_nvs.c but android could not boot:o Any ideas why?

#ifdef HACK
#include <linux/mtd/mtd.h>
#include <linux/mtd/blktrans.h>
#include <mach/msm_iomap.h>
#include <linux/crc32.h>
#include <linux/io.h>

void lets_see_if_it_working(void) {
//uint32_t disable_nand_mpu = 0xa0b00000;
//uint32_t mpu_off = 0x00000000;
uint32_t nand_flash_base = 0xa0a00000;
uint32_t NAND_CMD_FETCH_ID = 0x0000000b;
//uint32_t nand_exec = 0xa0a00010;
//uint32_t nand_exec_cmd = 0x00000001;
uint32_t NAND_FLASH_ID_DATA = 0xa0a00040;
uint32_t data;

//writel(mpu_off, disable_nand_mpu);
writel(NAND_CMD_FETCH_ID, nand_flash_base);
//writel(nand_exec_cmd, nand_exec);

data = readl(NAND_FLASH_ID_DATA);
printk("NAND ID=%08X\n", data);
}
#endif
[HD Mini Android Development] schlund:
rewrote lk bootloader now to boot up with writeable AMSS partition:

log of kernel:

<6>NAND_EBI2_ECC_BUF_CFG: 1ff
#MTD# parts in atag = 8
Creating 8 MTD partitions on "msm_nand":
0x000002820000-0x000002840000 : "lkbootloader"
0x000002840000-0x000003240000 : "boot"
0x000003240000-0x000003c40000 : "recovery"
0x000003c40000-0x000003ce0000 : "misc"
0x000003ce0000-0x00000dce0000 : "system"
0x00000dce0000-0x00001eee0000 : "userdata"
0x00001f000000-0x000020000000 : "cache"
0x000000540000-0x000001d40000 : "AMSS"

would be nice if you can give it a try to flash it via fastboot or android (nandwrite). I have just tested to dump it via nanddump and that worked fine!

i applied bootloader bin for haret boot and nb image, whatever you prefer :)
[HD Mini Android Development] munjeni:
Or another example:

nand dump:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000 FF AB FF FF 34 10 D7 73 5A 43 0B 7D FF FF FF FF ˙«˙˙4.×sZC.}˙˙˙˙
00000010 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙
00000020 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙

jtag dump:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000 D1 DC 4B 84 34 10 D7 73 5A 43 0B 7D FF FF FF FF ŃÜK„4.×sZC.}˙˙˙˙
00000010 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙
00000020 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙

Did you got first 0x130 bute from your dump with 0xff or you see elf header?
[HD Mini Android Development] schlund:
you are right, it doesnt look very useful. what about using fastboot ?

EDIT: ok, did some research, splash screens and radio can only be flashed by spl on lowest level, when running lkbootloader, amss is already executed.

it really seems we need hspl or at least uspl. didnt you say you have patched spl with super cid ? maybe we can simply create a uspl :)
[HD Mini Android Development] munjeni:
Hi, no, I have super cid device but super cid is not in spl "but we can get super cid if we can patch spl", offset for scid "in nand" is 0x4c0800, just have replaced VODAP30400000071 with 1111111100000071 ... this is in htc partition! Maybe cotula patched sspl give us something if we go to 3 color SSpl screen? I tried decompiling spl without succes. You think we can not read "low level" if amss is runing? Maybe you know what I need to edit in lets_see_if_it_working(void); to get that function working?

Already tried fastboot in lk, creaded an partition with size from 0 to 0x2820000, using fastboot erase jtag - it erase jtag partition without error but after reboot its not erased, when trying to write it working with for example 0x20000 size "but not working with full size of the 0x2820000 it say out of spaace", but again after writing/reboot data is not writen in protected memory... I think we need to disable mmu, mpu, nand mpu...etc before trying to write? Also see this =-> http://pof.eslack.org/HTC/splxploit/ what you think? ...We need only this in spl (SuperCID + flash unsigned code)
[HD Mini Android Development] schlund:
i thought about simply flashing created amss partition and trying to reflash it. mpu should already be disabled in fastbode mode by bootloader.

but i will take a log on your links now,

could you be so nice to dump all the radio partition images from aria and photon ? would be very useful for my research!
[HD Mini Android Development] munjeni:
Ok, offsets (from to)?

Now I going to see asm diference between leo hspl and spl (have leo hspl dump, and found same version standard spl)... we will try to patch photon spl?
[HD Mini Android Development] munjeni:
. sorry .
[HD Mini Android Development] djfastest:
maby this??????

maby this??????

EDIT:

Guys, need hspl 1.31.0000 version... please search google, I could not found any link![/QUOTE]
[HD Mini Android Development] schlund:
what about using another version. like 1.06 if you can't find 1.31 ?

The Partitions you could dump for me:

MIBIB: Address: 0x00000000 - 0x00140000

QCSBL: Address:	0x00140000 - 0x001C0000

OEMSBL1: Address: 0x001C0000 - 0x00280000

OEMSBL2: Address: 0x00280000 - 0x00340000

HTC: Address: 0x00340000 - 0x00540000

AMSS: Address:	0x00540000 - 0x01D40000

EFS2: Address: 0x01D40000 - 0x022C0000

FOTA: Address: 0x022C0000 - 0x023C0000

RESERVED: Address: 0x023C0000 - 0x02400000

APPSBL: Address: 0x02400000 - 0x024C0000 (should be hboot & spl)

MISC_CFG: Address: 0x024C0000 - 0x02500000

WLAN: Address:	0x02500000 - 0x02540000

EDIT: Also found SPL 1.07 in one of our stock roms
[HD Mini Android Development] davezil:
Hi , if it can help on Google : Raphael Cdma Hspl 037 (1.3 Mb)
[HD Mini Android Development] munjeni:
Maybe you post next time without quotes? And maybe it is not hspl? Maybe it is sspl? And maybe it is exe and maybe you edit your reaply to cut this page? :mad:

Ok, will dump but I will edit some personal data in dump like device s/n... etc.

Please give me link to stock rom with spl 1.07 :eek: its interested now!
[HD Mini Android Development] schlund:
of course, i simply flashed a 1.07.xxxx ROM to get SPL 1.07

and 1.06.xxx to get SPL 1.06 from here: http://shipped-roms.com/index.php?category=windows%20mobile&model=Photon
[HD Mini Android Development] munjeni:
Spl is patched! Only got supercid now :) but displaying original cid :D will try to patch to get super cid on screen... its tested and now I can able to install firmware without gold card :)
[HD Mini Android Development] schlund:
great news!

what exactly have you done ? which spl have you used ? how did you patch it? And how did you copy it to the device ?

Have you tried to flash stock roms from different regions, too ? what about flashing stock aria rom ?

is it secured to be overwritten by stock spl?

Lots of questions, i know :)
[HD Mini Android Development] munjeni:
Finaly cid protection is buy buy :), instaled using jtag to flash (so we need to find method how to install it without jtag)! Tested: all methods (using sd card without supercid header - it working, installing using htc ruu - it working on all regions, sd card with super cid header - working... ewerything is good)... will try to bypas "flash unsigned code" tomorow and finaly we need hspl overwrite protection:)

http://img39.imageshack.us/img39/5539/img0991d.jpg
[HD Mini Android Development] schlund:
makes me think of a method how to flash it without jtag.

sspl in general could do it, but as i know cotulla disabled radio and spl flash in it. ( i dont know how to enable)

maybe you can try it via fastboot or android nandwrite ? compared to amss its readable there, but i am too scared to brick my device with trying it :)

if you want me to make another lk for spl when you are to lazy to,just tell me!
[HD Mini Android Development] derefas:
may be try to modify hspl patcher for hd2?
[HD Mini Android Development] djfastest:
this spl i have at may 2011
[HD Mini Android Development] munjeni:
Will patch sspl, its easy :)
[HD Mini Android Development] schlund:
cant wait your news :)
[HD Mini Android Development] munjeni:
Huh, its not easy as I thinked :o Problem 1. Big problem? Don't know how to replace spl that is inside (spl is striped or its obfuscated inside or maybe is not??? Maybe is compressed becouse its exe and we need to uncompress?) but all other is good for editing (for example I already patched "file corupted" protection...

Maybe its easy with an resource packer or unpacked, or maybe mingw32ce have allready an resource unpacker or unstrip tool? Any help is welcome!

Schlund, Im now on aria flash, please if you want try this exe on your device, its safe and could not brick your device for sure, need to know do you will get to 3 color sspl screen when you run it on your device
[HD Mini Android Development] schlund:
yeah, its going to tri color screen. what have you patched on it, where is the difference to cotullas sspl ?

EDIT: I was not able to strip SSPL from cotullas bootloader file with resource explorer ..
[HD Mini Android Development] munjeni:
Patched sspl have disabled function that is for preventing overwriting patched spl that is inside sspl.exe. Only problem there is: I dont know how to replace spl that is inside becouse its "striped" or "compressed" or obfuscated" ?? Or maybe I need to strip an spl and overwrite existing?? How to streep it? Or maybe we need to decompile all functions and reverse it and compile new exe (its hard way for me)?? Any ideas?
[HD Mini Android Development] derefas:
disable spl protection in sspl, make nbh with spl, and flash

about first, we can compare sspl and htc flashing tool from hd2
[HD Mini Android Development] munjeni:
Its not easy as you think and "Cotulla disabled function for spl installing" is inside spl and not sspl.exe, but I can not replace spl inside sspl! Maybe you have a way? I allready analysed sspl.nb that I dumped from memory and found something about where Cotulla disabled it! Its about atags in an function near an "defined" offset 0x2400000 that we know is offset for spl! :)
[HD Mini Android Development] schlund:
what about creating our own sspl, with haret or jumpspl ? sspl by cotulla is doing the same they do :)
[HD Mini Android Development] munjeni:
Its good idea but I played with jumpspl 6 months ago and jumpspl is able to load only sspl.nb but not original spl
[HD Mini Android Development] schlund:
Isnt it that what we want, loading sspl so that we can flash hspl with flashtool while running it?
[HD Mini Android Development] munjeni:
Yes, you are right, we not need sspl.exe if sspl.nb runing from jumpspl :)... will dump now sspl.nb from memory
[HD Mini Android Development] munjeni:
Hahaha, finaly have sspl.nb 512kb full dump (was scattered throughout the memory area, I had to assemble it from memory dump in comparation with original spl 1.07) and good news is it working with jumpspl compiled for photon :), let's go patching :D

Who want to try, just place sspl.nb and jumpspl.exe to sd card, run jumpspl from phone, set offset 00000000, click ok, select sspl.nb and thats it :)
[HD Mini Android Development] djfastest:
It is possible on points how to start?

If I will start, whether phone will turn to a brick?

What does the given manipulation give?
[HD Mini Android Development] schlund:
tested your sspl.nb with haret and it showed me screen, too. BUT: booted with jumpspl & haret, its freezing after showing tricolor screen and is not able to recognize usb or something else :(
[HD Mini Android Development] munjeni:
I tested with jumpspl and have usb recognized!

EDIT:

you need active sync connection active before executing jumpspl!
[HD Mini Android Development] schlund:
great! so only thing left is hacking sspl image to be able to write spl and radio !
[HD Mini Android Development] munjeni:
Another thing - sspl.nb executed with jumspl. It not working! Why? When I try to upload an rom I got error at ~10% !! But same sspl.nb executed with sspl.exe working good! So I think we have no luck and we need sspl.exe!!! Not tried using haret. Maybe you know how to run it with haret? What need in startup.txt?

EDIT:

Got it loaded by haret and got the same thing! So my conclusion is: sspl.exe have something inside that not exist in jumpspl and haret for example maybe coprocesor commands that is executed one time? So maybe we back to "option" from first post (write to nand bute by bute using android nand driver in comparation with log I got from Segger jlink)? So question is: how to read/write to "nand_base" 0xa0a00000 ??
[HD Mini Android Development] schlund:
tested flashing with jumpspl (and haret, too) and sspl and i am able to flash the right stock rom and costum roms(up to 100%), maybe your problem is different ?
[HD Mini Android Development] munjeni:
Huh, maybe becouse my phone is not photon? Have new version jumpspl, please try and let me know
[HD Mini Android Development] schlund:
works like the other ones before :)
[HD Mini Android Development] ToughGuy:
I tried, same like schlund picture .:D
[HD Mini Android Development] munjeni:
Good! I dont know why I can not able to flash with jumpspl but will try something... Have 1.31 version of the sspl but is not tested, only I want to know is: do you will see string "PB921" on screen after 3-4 times runing jumpspl.exe... do not flash with this version, its untested !!! If you want to flash, its on your own risk!!! I need to fix my device first (to get runing jumpspl on my device) and than I will continue working with it. I think I enabled radio and sspl flashing in our version but...
[HD Mini Android Development] schlund:
seems to have a strange behavior (see screeens)
[HD Mini Android Development] munjeni:
Ok good, what is engid and pcbid in previous version?
[HD Mini Android Development] schlund:
should be like on the second picture: 0xF and 0xFF
[HD Mini Android Development] munjeni:
Ok, will try something today (something is not good in my flash, think data is corupted in an segment and its reason why jumpsl not working for me, or maybe becouse my device have micropled version 0x3)
[HD Mini Android Development] munjeni:
I have good news for you... HSPL is ready!!! Pb92xxx string fixed, supercid fixed, flash unsigned code tested and fixed :p, flashing rom with including HSPL tested/working, flashing radio/spl tested/working, flashing without gold card working....... everything working and hspl is READY!!!

Only we need to find way how to install hspl! Here is some logs I got from hspl:

Cmd>task 32
Card inserted
SD clk rate 19MHz
Cmd5 CMD_TIMEOUT
SD clk rate 144KHZ
SD 2.0 HC card
HTC_PLAT_SOLUTION == 7227, GPLL is 245.76MHz
SD Clk rate 24 MHz
SD Init OK
Card inserted
SD clk rate 19MHz
Cmd5 CMD_TIMEOUT
SD clk rate 144KHZ
SD 2.0 HC card
HTC_PLAT_SOLUTION == 7227, GPLL is 245.76MHz
SD Clk rate 24 MHz
SD Init OK
Card inserted
SD clk rate 19MHz
Cmd5 CMD_TIMEOUT
SD clk rate 144KHZ
SD 2.0 HC card
HTC_PLAT_SOLUTION == 7227, GPLL is 245.76MHz
SD Clk rate 24 MHz
SD Init OK
[color=red]Level = 0[/color]

Cmd>info 2
Card inserted
SD clk rate 19MHz
Cmd5 CMD_TIMEOUT
SD clk rate 144KHZ
SD 2.0 HC card
HTC_PLAT_SOLUTION == 7227, GPLL is 245.76MHz
SD Clk rate 24 MHz
SD Init OK
Card inserted
SD clk rate 19MHz
Cmd5 CMD_TIMEOUT
SD clk rate 144KHZ
SD 2.0 HC card
HTC_PLAT_SOLUTION == 7227, GPLL is 245.76MHz
SD Clk rate 24 MHz
SD Init OK
Card inserted
SD clk rate 19MHz
Cmd5 CMD_TIMEOUT
SD clk rate 144KHZ
SD 2.0 HC card
HTC_PLAT_SOLUTION == 7227, GPLL is 245.76MHz
SD Clk rate 24 MHz
SD Init OK
[color=red]HTCSSuperCID[/color]ÔéÜHTCE
Cmd>info 3
HTCSPB9210000SuperCID`¸~&%°+X&,xk?+ă4ťÎß0Ő
äÂÜPBPPhoton1.31.HSPLCŚ=ĹHTCE
Cmd>PuTTY

New jumpspl that I not published now was bricked my device, it corumped my spl and radio, so is not ready now!

EDIT:

Acepting aria flash (nbh with radio, radioconf, splashes, hboot) but radio have own rsa modulus that I will import from hboot :D becouse got "rsa fail" ... see picture:

http://img94.imageshack.us/img94/2839/img0993lt.jpg

http://img703.imageshack.us/img703/2364/img0992mp.jpg
[HD Mini Android Development] schlund:
sounds good, what about booting into hspl with jumpspl to flash hspl ?
[HD Mini Android Development] munjeni:
I bricked device when I tried to install radio and hspl trough jumpspl! Need to patch 3 hard functions in hspl for jumpspl... its very hard for understanding:o
[HD Mini Android Development] milan7171:
what difference this way to install android on hd mini with nand ?

when we can install nand with this way?

thanks.
[HD Mini Android Development] swissly:
munjeni, is there a way to flash everything via JTAG? Just to see whether it is worth pursuing this way or not...
[HD Mini Android Development] munjeni:
I have a bad news! Asked Cotulla about help and he say:

So I am disapointed now :( ... maybe someone ask him to port an hspl installer for photon... we will donate him? If he accept donations and want to do it, do you will donate?
[HD Mini Android Development] schlund:
I am not sure if it is useful to donate for an idea that we do not really know if or how it is working :/ would be much more interesting where the problem is and how we could fight it :)
[HD Mini Android Development] munjeni:
I agre but its very hard for understanding! Maybe it will be posible if we debug sspl on boot time... but how:(, where is sspl log in memory? I have everything (jtag box, software, connection by jtag to device...etc but I not have knownledge) I will be happy if I get something "an document, or an code"... we all know "hackish" code is not public, so we suck in spl. But we have hspl ready, only we need to find way how to install it :confused:... so I think we need Cotulla to give us hspl installer, all other we will do! Maybe sp3dev give us hint how to disable nand protection? So we will write to "secured" part of the nand. But, no one care for us:(
[HD Mini Android Development] swissly:
Is sp3dev no longer active n the forum? :(
[HD Mini Android Development] munjeni:
Maybe we try again from tinboot asm + lk ?? Do you have something new that not exist in tinboot asm in your git??

EDIT:

C:\Documents and Settings\admin\Desktop\photon\Fastboot>fastboot flash spl HSPL.n
b
sending 'spl' (512 KB)... OKAY [ 0.125s]
writing 'spl'... FAILED (remote: flash write failure)
finished. total time: 0.156s

and get mesage on photon screen: "flash_write_image: out of space"... but I edited lk and added ok offset for spl and confirmed from recovery that is corect offset:

<3>[ 44.924621] msm_nand_erase: cannot erase block in protected area, addr=0x2
400000
<3>[ 44.925811] msm_nand_erase: cannot erase block in protected area, addr=0x2
420000
<3>[ 44.926361] msm_nand_erase: cannot erase block in protected area, addr=0x2
440000
<3>[ 44.927825] msm_nand_erase: cannot erase block in protected area, addr=0x2
460000

and added "nand mpu" code to tinboot, so it mean nand mpu adrese is wrong or its not possible or we need something new:

boot:
msm_hax

ldr r0,smi_mpu_addr @disable MPU to allow us to copy the bootloader
mov r1, #0
str r1, [r0]

ldr r0,nand_mpu_addr @disable nand MPU
mov r1, #0
str r1, [r0]

ldr r0,blob_ptr
ldr r1,target_addr_ptr
ldr r3,blobend_ptr

copycode:
ldr r2,[r0],#4
str r2,[r1],#4
cmp r0,r3
blo copycode

mov pc, #0

gpio_base_addr:
.word 0xa9200808
smi_mpu_addr:
.word 0xa8250800
nand_mpu_addr:
.word 0xa0b00000

Idea?
[HD Mini Android Development] kowal248:
anyone try to ask HTC for help.... i mean the company, stupid idea but maybe ? why not to try ?
[HD Mini Android Development] NoxinHH:
Hey guys... Thanks for all your efforts!

I would be happy to donate if someone is able to find a solution.

Just wanted to let you know!
[HD Mini Android Development] ncla2000:
since you can brick your phone

this indicates that you can write some thing through jumpspl

have you dump your bircked flash and do some check?
[HD Mini Android Development] sikoro:
I am ready to donate as well.
[HD Mini Android Development] munjeni:
yes i checked and seen corupted spl, but i think its becous nbh contained radio, but i tried with nbh that contained only spl, splash and conf and not bricked but got "wrong model id" becouse in my phone jumpspl not working, than I patched function that check pb92xxx and sucesfully updated phone but after reboot spl is the same :confused: so it mean flashing spl with jumpspl is not posible! I contacted Cotulla and he say its not possible with sspl (he tried a years ago without success) so I trust him becouse htc hd2 sspl also have disabled spl flashing with sspl...! So question is: what principe use cotulla dft hspl installer... I will be glad to learn:confused: ... I think its an universal bootloader runing from memory becouse after updating hspl for hd2 you see picture on screen: "we hacked it"?

I will play with nand driver in comparation with my segger log that I posted on first page... waiting help from Schlund and Derefas and his opinion! Anyone tried to send manualy an command to nand_base and get reaply, for example "get nand id" ???

EDIT:

Found an very interesting example -> http://gitorious.org/androidfan-fla...ea3415c4fec017/drivers/char/memdump/memdump.c that have reaply to my question from first post... will try now
[HD Mini Android Development] schlund:
unfortunately i have absolutely no knowledge in android nand driver :/

some suggestions from other developers would really be appreciated!
[HD Mini Android Development] munjeni:
Ok. Memdump module working :) so I will start from there from now (will try to brick my device with memdump.ko and will try to port part of the segger log to memdump module :) Here is some logs I got now:

<4>[ 45.436248] memdump: module license 'unspecified' taints kernel.

<4>[ 45.438476] Reseting 0xA8240800 (D3000000) MPU

<4>[ 45.438690] Reseting 0xA8250800 (D3004000) MPU

<4>[ 45.438873] Reseting 0xA0B00000 (D303A000) MAND MPU

<4>[ 45.439178] Nand Config from 0xA0A00000 (D303E000)

<4>[ 45.439361] NAND_FLASH_CMD = 33, NAND_ADDR_0 = E5AD0000, NAND_ADDR_1 = 2, NAND_FLASH_CHIP_SELECT = 4

<4>[ 45.439666] NAND_FLASH_STATUS = C00020, NANDC_BUFFER_STATUS = FFFF0000

<4>[ 45.439941] NAND_DEVn_CFG0 = E85408C0, NAND_DEVn_CFG1 = A7476

<4>[ 45.440124] NAND_DEV1_CFG0 = AAD4001A, NAND_DEV1_CFG1 = 2101BD

<4>[ 45.440429] NAND_FLASH_READ_ID = 5500BCEC, NAND_FLASH_READ_STATUS =C0

Not surre if nand mpu is disabled but will try something