V1.4–Aug07,modify0xFDFACommand*CBWByte28:CSAddSPC1burningtoolcommandModifyICVersionValuebyte3from0xfftoAddGetCSValueandSDRAMInitialConformityallprojectintheoneFredfirstrevisionforUSBToolUSBTool主要是依據(jù)USBSCSICommand的協(xié)議方式，PC軟體通過下VendorCommand和小機溝通并且操作的方式。為了避免VendorCommand和其他廠商的應(yīng)用和Generalplus發(fā)生，PC在下SCSIVendorCommandHandshake的。然后才下具體的mand已Device操作。VendorCommand。;Version;Byte8~Byte10:Date。eg：//0~3:ICbodyis//4~7:ICVersion,0xFFFFFFmeansmask//Date//Date//DateProjectGetICVersionValueandUsedCommandUsedRomCodeByte4~7:HandshakeMethodFotisIDEUSBtoPrintBridgeToolByte4~7:HandshakeMethod u’nSPIDEUSBSpeedupDownloadToolByte4~7:HandshakeMethodInitialforu’pIDEUSBDownloadupfunctionSPC1USBburningByte4~7:HandshakeMethodSPC1USBburningtoolUSBSCSIVendorCommandOperation1.USBSCSIVendorCommandHandshakeMethodSetvendor*CBWByte15:*CBWByte16:*CBWByte29-30:GP*IN10BytesforReGetDriveStatus:TheLogicUnitNumberthatoperatingnow*CBWByte15*CBWByte16*CBWByte29-30:GPChangNo*CBWByte15*CBWByte16*CBWByte29-30:GP *IN512BytesforDescription*IN512BytesforDescriptionGetIC*CBWByte15*CBWByte16*CBWByte29-30:GP*IN11BytesforICVersionExit*CBWByte15:*CBWByte16:*CBWByte29-30:GP2.ROMTestTool Operation(*Type0~2):EraseNandFlashPhysical*CBWByte15*CBWByte16*CBWByte13:Block*CBWByte29-30:GPOperation(*Type0~2):ReadNandFlashPhysicalOperation(*Type3):Read*CBWByte15*CBWByte16*CBWByte17:HighOperation*CBWByte18:LowOperation*CBWByte21:*CBWByte22:HighOperationData*CBWByte23:LowOperationData*CBWByte29-30:GPOperation(*Type0~2):WriteNandFlashPhysicalOperation(*Type3):Write*CBWByte15*CBWByte16*CBWByte17:HighOperation*CBWByte18:LowOperation*CBWByte21:*CBWByte22:HighbyteOperationData*CBWByte23:LowbyteOperationData*CBWByte29-30:GP ReportNeedEraseNandFlash*CBWByte15*CBWByte16*CBWByte29-30:GPNandflashPhysicalOperation(*Type0~2):EraseNandFlashPhysicalone*CBWByte15*CBWByte16*CBWByte17:OperationBlock*CBWByte29-30:GPRAMOperation(*Type Callfunctioninram*CBWByte15*CBWByte16*CBWByte17:HighwordHighbyteOperationAddress*CBWByte18:HighwordLowbyteOperationAddress*CBWByte19:LowwordHighbyteOperationAddress*CBWByte20:LowwordLowbyteOperationAddress*CBWByte29-30:GPRAMOperation(*Type Gotofunctioninram*CBWByte15*CBWByte16*CBWByte17:HighwordHighbyteOperationAddress*CBWByte18:HighwordLowbyteOperationAddress*CBWByte19:LowwordHighbyteOperationAddress*CBWByte20:LowwordLow*CBWByte29-30:GPNandflashLogicoperation*CBWByte15StandardSCSIWrite Operation(*Type4):ReadLogicoperation*CBWByte15*GPStandardSCSIReadSavedatainfileWrite*CBWByte15:*CBWByte16:*CBWByte17:HighwordHighbyteOperationAddress*CBWByte18:HighwordLowbyteOperationAddress*CBWByte19:LowwordHighbyteOperationAddress*CBWByte20:LowwordLowbyteOperationAddress*CBWByte21:*CBWByte22:HighbyteOperationData*CBWByte23:LowbyteOperationData*CBWByte29-30:GPRead*CBWByte15:*CBWByte16:*CBWByte17:HighwordHighbyteOperationAddress*CBWByte18:HighwordLowbyteOperationAddress*CBWByte19:LowwordHighbyteOperationAddress*CBWByte20:LowwordLowbyteOperationAddress*CBWByte21:*CBWByte22:HighbyteOperationData*CBWByte23:LowbyteOperationData*CBWByte29-30:GPEraseNorFlashOne*CBWByte15*CBWByte16*CBWByte19:HighbyteOperation*CBWByte20:LowbyteOperation*CBWByte29-30:GPEraseMEMORYBy*CBWByte15:*CBWByte16:*CBWByte17:HighwordHighbyteOperationAddress*CBWByte18:HighwordLowbyteOperationAddress*CBWByte19:LowwordHighbyteOperationAddress*CBWByte20:LowwordLowbyteOperationAddress*CBWByte21:*Type(only*CBWByte29-30:GPPollingchipEraseis*CBWByte15:*CBWByte16:*CBWByte17:HighwordHighbyteOperationAddress*CBWByte18:HighwordLowbyteOperationAddress*CBWByte19:LowwordHighbyteOperationAddress*CBWByte20:LowwordLowbyteOperationAddress*CBWByte21:*Type(only*CBWByte29-30:GPInput:1ByteforreturnpollingEraseMEMORYByOne*CBWByte15:*CBWByte16:*CBWByte17:HighwordHighbyteOperationAddress*CBWByte18:HighwordLowbyteOperationAddress*CBWByte19:LowwordHighbyteOperationAddress*CBWByte20:LowwordLowbyteOperationAddress*CBWByte21:*CBWByte29-30:GP EraseisOK*CBWByte15*CBWByte16*CBWByte17:HighwordHighbyteOperationAddress*CBWByte18:HighwordLowbyteOperationAddress*CBWByte19:LowwordHighbyteOperationAddress*CBWByte20:LowwordLowbyteOperationAddress*CBWByte29-30:GPInput:1ByteforreturnpollingGetchecksumbyrefertostartaddress/endaddress*CBWByte15:*CBWByte16:*CBWByte17:HighwordHighbyteStart*CBWByte18:HighwordLowbyteStart*CBWByte19:LowwordHighbyteStart*CBWByte20:LowwordLowbyteStart*CBWByte21:HighwordHighbyteEnd*CBWByte22:HighwordLowbyteEnd*CBWByte23:LowwordHighbyteEnd*CBWByte24:LowwordLowbyteEnd*CBWByte29-30:GPInput:4BytesforsavechecksumInitialSDRAM*CBWByte15:*CBWByte16:*CBWByte17:P_SD_TIMINGHigh*CBWByte18:P_SD_TIMINGLow*CBWByte19:P_SD_CTRL0High*CBWByte20:P_SD_CTRL0Low*CBWByte21:*CBWByte22:P_SD_CTRL1High*CBWByte23:P_SD_CTRL1Low*CBWByte24:P_SD_CBRCYCHigh*CBWByte25:P_SD_CBRCYCLow*CBWByte26:P_SD_MISCHigh*CBWByte27:P_SD_MISCLow*CBWByte28:CS*CBWByte29-30:GP4.Initialforu’pIDEUSBDownloadSpeedupfunctionSetCS0~CS4*CBWByte15:*CBWByte16:*CBWByte17:CS0ValueLow*CBWByte18:CS0Valuehigh*CBWByte19:CS1ValueLow*CBWByte20:CS1Valuehigh*CBWByte21:CS2ValueLow*CBWByte22:CS2Valuehigh*CBWByte23:CS3ValueLow*CBWByte24:CS3Valuehigh*CBWByte25:CS4ValueLow*CBWByte26:CS4Valuehigh*CBWByte29-30:GPGetCS0~CS4*CBWByte15:*CBWByte16:*CBWByte29-30:GPInput:10BytesforCS0~CS4SetAddress*CBWByte15:*CBWByte16:*CBWByte17:HighwordHighbyte*CBWByte18:HighwordLowbyte*CBWByte19:LowwordHighbyte*CBWByte20:LowwordLowbyte*CBWByte21:*CBWByte22:Highbyte*CBWByte22:lowbyte*CBWByte29-30:GPGetAddress*CBWByte15:*CBWByte16:*CBWByte17:HighwordHighbyte*CBWByte18:HighwordLowbyte*CBWByte19:LowwordHigh*CBWByte20:LowwordLowbyte*CBWByte21:*CBWByte29-30:GPInput:2BytesforGetAddress5.FORTISIDEUSBtoPrintToolPrintportcontrolcommand:PCsenddatatoprintdataport*CBWByte15*CBWByte16*CBWByte17*CBWByte29-30:GPPrintportcontrolcommand:PCsenddatatoprintcontrol*CBWByte15*CBWByte16*CBWByte17*CBWByte29-30:GPPrintportcontrolcommand:PCreaddatafromprint*CBWByte15*CBWByte16*CBWByte29-30:GPSimpleICEcommand:send*CBWByte15*CBWByte16*CBWByte17*CBWByte18*CBWByte29-30:GP receive1bytedata*CBWByte15*CBWByte16*CBWByte17*CBWByte29-30:GP receive1worddata*CBWByte15*CBWByte16*CBWByte17*CBWByte29-30:GPSimpleICEcommand:post*CBWByte15*CBWByte16*CBWByte17*CBWByte29-30:GPSimpleICEcommand:*CBWByte15*CBWByte16*CBWByte17*CBWByte29-30:GPICEcommand:*CBWByte15*CBWByte16*CBWByte17:download*CBWByte18:downloadstart*CBWByte19:downloadend*CBWByte23:downloadaddresslow*CBWByte23:downloadaddresshigh*CBWByte23:downloadsizelow*CBWByte23:downloadsizehigh*CBWByte29-30:GP *CBWByte15*CBWByte16*CBWByte17:ICEcommand*CBWByte18:uploadaddresslow*CBWByte19:uploadaddresshigh*CBWByte20:ICEcommand*CBWByte21:ICEcommand*CBWByte22:ICEcommand*CBWByte23:uploadsizelow*CBWByte23:uploadsizehigh*CBWByte29-30:GP *CBWByte15*CBWByte16*CBWByte29-30:GPAdvancedICEcommand:senddata(multiplesend*CBWByte15*CBWByte16*CBWByte17:datasizelow*CBWByte18:datasizehigh*CBWByte29-30:GPAdvancedICEcommand:postdata(multiplepost*CBWByte15*CBWByte16*CBWByte17:datasizelow*CBWByte18:datasizehigh*CBWByte29-30:GPAdvancedICEcommand:set*CBWByte15*CBWByte16*CBWByte17:countlow*CBWByte18:counthigh*CBWByte29-30:GP getCPUregisterdata*CBWByte15*CBWByte16*CBWByte17:ICEcommand*CBWByte18:ICEcommand*CBWByte19:ICEcommand*CBWByte20:ICEcommand*CBWByte21:ICEcommand*CBWByte22:ICEcommand**CBWByte29-30:GP6.SPC1USBburningtoolSelecttargetNorFlashthatwanttoburning*CBWByte15*CBWByte16*CBWByte17:targetNorFlashindex,startfrom0*CBWByte29-30:GP*Type:CBWByte21//CallfunctionGetCMDValueEx(21); NandFlashphysicaloperation NandFlashlogic SST SPI MX GPTAG(TheSameintheallproject)CBWByte29:’G’ASCIIValueCBWByte30:’P’ASCIIValue*CBWSignaturethathelpsidentifythisdatapacketasaCBW.Thesignaturefieldshallcontainthevalueh(littleendian),indicatingaCBW.ACommandBlockTagsentbythehost.ThedeviceshallechothecontentsofthisfieldbacktothehostinthedCSWTagfieldoftheassociatedCSW.ThedCSWTagpositivelyassociatesaCSWwiththecorrespondingCBW.ThenumberofbytesofdatathatthehostexpectstotransferontheBulk-InorBulk-Outendpoint(asindicatedbytheDirectionbit)duringtheexecutionofthiscommand.Ifthisfieldiszero,thedeviceandthehostshalltransfernodatabetweentheCBWandtheassociatedCSW,andthedeviceshallignorethevalueoftheDirectionbitinbmCBWFlags.ThebitsofthisfieldaredefinedasBit7Direction-thedeviceshallignorethisbitifthedCBWDataTransferLengthfieldiszero,otherwise:0=Data-Outfromhosttothe1=Data-InfromthedevicetotheBit6Obsolete.ThehostshallsetthisbittoBits -thehostshallsetthesebitstoThedeviceLogicalUnitNumber(LUN)towhichthecommandblockisbeingsent.FordevicesthatsupportmultipleLUNs,thehostshall ceintothisfieldtheLUNtowhichthiscommandblockisaddressed.Otherwise,thehostshallsetthisfieldtozero.ThevalidlengthoftheCBWCBinbytes.Thisdefinesthevalidlengthofthecommandblock.Theonlylegalvaluesare1through16(01hthrough10h).Allothervaluesare Thecommandblocktobeexecutedbythedevice.ThedeviceshallinterpretthefirstbCBWCBLengthbytesinthisfieldasacommandblockasdefinedbythecommandsetidentifiedbybInterfaceSubClass.Ifthecommandsetsupportedbythedeviceusescommandblocksoffewerthan16(10h)bytesinlength,thesignificantbytesshallbetransferredfirst,beginningwiththebyteatoffset15(Fh).ThedeviceshallignorethecontentoftheCBWCBfieldpastthebyteatoffset(15+bCBWCBLength-1).*CBWCBOperationThefirstbyteofallcommandblocksshallcontainanOperationCode.TheOperationCodeoftheblockindicatestheoperationtobeperformed.Thereare256possibleoperationcodes.Operationcodesaredefinedinthesubsequentsections.LogicalUnitTheLogicalUnitNumberfieldspecifiestheLogicalUnitthatshallprocessthecommandEventhoughSFF-8070istatesthattheLogicalUnitNumber(LUN)attheblock(packet)levelwillbemadeobsoleteinafuturestandard,blocklevelLUNsareusedbyUFIcommandblocksbecauseacontrollevelLUNdoesnotexist.(ThecontrollevelLUNissetintheATAPIBlockDeviceSelectRegister,whichdoesnotexistontheUFIdevice.)IftheUFIdevicesupportsonlyonelogicalunit,itsLogicalUnitNumbershallbezero.ForotherthantheINQUIRYcommand,iftheUFIdevicedetectsaunsupportedLogicalUnitNumber,thedeviceshallabortthecommand,settingthesensekeyshallbesettoILLEGALREQUESTandtheadditionalsensecodetoLOGICALUNITNOTSUPPORTED.LogicalBlockTheLogicalBlockAddressmustbeginwithblockzeroandbecontiguousthroughthelastlogicalblock.FortheUSB-FDU,thelogicalblockisthelogicalsector,whichoccupiesonephysicalsectoronthefloppydiskettemedium.Logicalblock0isthefirstsectoronthediskette,namely,track0,head0,sector1.TheLogicalBlockAddresscanbecalculatedfromthetrack-head-sectornumbersusingthefollowingformula.LBA Head_u SectorLBALogicalBlockAddress(zero-based)TrackTrackNumber(zero-based)HeadTrkNumberofheadspertrackHeadHeadNumber(zero-based)SecTrkNumberofsectorspertrackSectorSectorNumber(one-based)Thenumberofheadspertrackandthenumberofsectorspertrackdependsontheformatofthefloppymedium.Givenalogicalblockaddress,thetrack,head,andsectornumberscanbecalculatedasfollows:Sector_LBAmod Head_LBAySecTrk_modHeadTrkTrack_LBAySecTrk_yHeadTrkwheremodisthemoduloorremainderTransferTheTransferLengthFieldspecifiestheamountofdatatobetransferred,usuallythenumberofblocks.ForseveralcommandblockstheTransferLengthindicatestherequestednumberofbytestobesentasdefinedinthecommandblockdescription.Forthesecommand