I had read the source code of phison (about badusb, python file). But I cannot understand what command the program send to SCSI device. After reading about SCSI commands, I still cannot find opcode begin with "06h" (there exist a similar opcode which SET DEVICE ID) https://www.seagate.com/staticfiles/support/disc/manuals/scsi/100293068a.pdf the above is SCSI commands I find. Below are commands read and write:
```
def get_info(self):
'''
Performs a SCSI call to read version info from the device.
Returns bool.
The object's following attributes are set:
data, version, run_mode, chip_type, date, f1f2
'''
self.data = self.SCSI_device.read('\x06\x05\x00\x00\x00\x00\x00\x00\x01',528)
if not self.data or self.data[0x17A:0x17C]!='VR':
return False
self.version = struct.unpack('BBB', self.data[0x94:0x97])
self.f1f2 = struct.unpack('BB', self.data[0x9A:0x9C])
self.date = struct.unpack('BBB', self.data[0x97:0x9A])
if self.data[0xA0:0xA8]==' PRAM ':
self.run_mode = 'BROM' # BootROM
elif self.data[0xA0:0xA8]==' FW BURN':
self.run_mode = 'BN' # firmware burner
elif self.data[0xA0:0xA8]==' HV TEST':
self.run_mode = 'HV' # hardware verify
else:
self.run_mode = 'FW' # firmware
self.chip_type = struct.unpack('>H', self.data[0x17E:0x180])[0]
data = self.SCSI_device.read('\x06\x56\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00',512)[0:6].encode('hex').upper()
self.chip_id = '-'.join(data[i:i+2] for i in range(len(data))[::2])
return True
def run_firmware(self, firmware):
'''
Loads firmware onto device. Returns bool.
'''
# rebooting
self.brom()
sleep(2)
# sending firmware
self.load_file(firmware,'\x01','\x00')
ret = self.SCSI_device.read('\x06\xEE\x01\x00\x00\x00\x00\x00\x00', 72)
sleep(2)
self.load_file(firmware,'\x03','\x02')
self.SCSI_device.read('\x06\xEE\x01\x01\x00\x00\x00\x00\x00', 72)
self.SCSI_device.read('\x06\xEE\x00\x00\x00\x00\x00\x00\x00', 72)
self.SCSI_device.read('\x06\xEE\x00\x01\x00\x00\x00\x00\x00', 72)
# executing
self.brom()
sleep(2)
return True
def pram(self):
'''
Called to run a burner or firmware. Returns int result.
'''
return self.SCSI_device.write('\x06\xB3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', '')
def brom(self):
'''
Sets device into boot mode from firmware mode. Returns int result.
'''
return self.SCSI_device.write('\x06\xBF\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', '')
```
