SMI experiment results, Try #1:

Experiment setup

This experiment was using a 4 GB USB stick with an SMI controller.
I played with the the SMI MP-Tool and recorded the following SCSI command with Wireshark and USB-PCAP: 
cdb: [0xf0,0x01,0x00,0x6c,0x00,0x7d,0x02,0x02,0x00,0x32,0x01,0x03,0x00,0x00,0x02,0x01,]
This command seems to have retrieved the following user-data block from the NAND Flash directly:
67 81 51 07 E6 10 54 61 F9 44 17 98 71 51 27 E6 
D0 56 E1 F6 44 35 98 BD 53 8F E9 20 76 C1 36 86 
B7 17 B2 71 AD 25 EE DC 66 C9 56 B7 F7 B0 31 A0 
A5 C3 DC 88 CB 32 BA AF 9F E1 40 47 81 91 05 66 
1F 54 43 F9 88 15 30 7E A1 07 C6 10 94 63 79 4B 
17 BA 71 9D 25 4E DF A6 C1 D6 84 F7 1A 32 5C AD 
CB EC B8 6B 91 79 67 17 52 73 ED 28 6E F1 66 27 
54 D3 FA E8 1E 70 45 21 9E C5 46 9F 97 41 73 87 
29 12 F6 6E 35 64 BF 5B 83 D9 08 D6 32 F4 AE 3B 
E4 98 5B 51 DB E4 D8 5A D1 DE E4 C6 5A 95 DF 7C 
C3 0A 8A 3F 3C 82 8B 0F 3A 22 9C CF 4A A3 BF C9 
80 B5 03 BE 09 84 35 18 BE 53 85 E9 1C 76 49 35 
B6 BD B7 8D B1 2D A6 ED D6 6C F5 6A 3F 7C 83 0B 
0A 3A 3C 9C 8B 4B 3B BA 99 9F 55 43 FF 88 01 30 
06 A0 17 C0 70 81 23 06 CA 16 BC 77 89 31 36 A6 
B7 D7 B0 F1 A2 25 CC DC AA CB FE B8 07 90 11 60 
67 41 53 87 E9 10 76 61 35 46 BF 97 81 71 07 26 
12 D4 6E F9 66 17 54 73 F9 28 16 F0 76 21 34 C6 
BA 97 9F 71 43 27 8A D1 3E E6 86 57 15 F2 7C 2D 
08 EE 32 64 AD 5B EF D8 60 D1 42 E7 8E 51 25 E6 
DC 56 C9 F6 B4 37 B8 B1 93 A5 69 DF 74 C3 3A 8A 
9F 3F 42 83 8F 09 32 36 CC B6 AB B7 F9 B0 15 A0 
7D C1 0C 86 2B 14 FA 7A 1D 1C 4E 49 A5 B5 DD BC 
CD 8A AD 3F EE 80 67 01 52 07 EC 10 68 61 71 47 
27 92 D1 6E E7 66 53 55 EB FC 78 09 10 36 60 B5 
43 BF 89 81 35 06 BE 17 84 71 19 26 56 D5 F6 FC 
36 08 B4 33 B8 A9 93 F5 68 3F 70 83 23 0A CA 3E 
BC 87 8B 11 3A 66 9D 57 4F F3 A0 29 C0 F4 82 3B 
0C 9A 2B 5C FB CA 18 BC 53 89 E9 34 76 B9 37 96 
B1 77 A7 31 D2 A4 EF DA 60 DD 42 CF 8E A1 27 C6 
D0 96 E3 76 4B 35 BA BD 9F 8D 41 2F 86 E1 16 46 
75 95 3D 7E 8F 07 22 12 CC 6E A9 67 F7 50 33 E0 
Sectors downloaded.
Then I tried to modify each of the bytes individually (while keeping all other bytes in the original form). You can click on each byte and see what happens when it is modified: 
cdb: [0xf0,0x01,0x00,0x6c,0x00,0x7d,0x02,0x02,0x00,0x32,0x01,0x03,0x00,0x00,0x02,0x01,]
On each of those pages every line is one different value being tried. In the first row you see that value. The original unmodified value is marked in bold. In the middle you have the first line of the data that was retrieved with the modified request. The rightmost value is the number of seconds the request took.

So what effect does each of the bytes have?