Some moodle security codes in file.php:

 if (!$forcedownload) {
                require_once("$CFG->dirroot/mod/$mod/lib.php");
                $trustedfunction = $mod.'_is_moddata_trusted';
                if (function_exists($trustedfunction)) {
                    // force download of all attachments that are not trusted
                    $forcedownload = !$trustedfunction();
                } else {
                    $forcedownload = 1;
                }
            }

Caused SCORM module always force user to download the scorm content instead of display it.

After check mod/scorm/lib.php, there was no "scorm_is_moddata_trusted" function. After add such function and make it always return true(trusted scorm data because it only can be uploaded by tutor/admin), it works.