W39V040FB

W39V040FB_07 WINBOND | Alldatasheet

Document overview

• Manufacturer or author: Provided By ALLDATASHEET.COM(FREE DATASHEET DOWNLOAD SITE)
• PDF pages: 34

Technical content

512K × 8 CMOS FLASH MEMORY WITH FWH INTERFACE Publication Release Date: December 12, 2005 - 1 - Revision A4 Table of Contents- 9.5 Software Product Identification and Boot Block Lockout Detection Acquisition Flow .1 7

• 2 -

Publication Release Date: December 12, 2005 - 3 - Revision A4 1. GENERAL DESCRIPTION The W39V040FB is a 4-megabit, 3.3-volt onl y CMOS flash memory organized as 512K × 8 bits. For flexible erase capability, the 4Mbits of data are divided into 8 uniform sectors of 64 Kbytes. The device can be programmed and erased in-system with a standard 3.3V power supply. A 12-volt VPP is required for accelerated program. The unique cell ar chitecture of the W39V040FB results in fast program/erase operations with extremely low curr ent consumption. This device can operate at two modes, Programmer bus interface mode, Firmware Hub (FWH) bus interface mode. As in the Programmer interface mode, it acts like the traditional flash but with a multiplexed address inputs. But in the FWH interface mode, this device complies with the Intel FWH specification. The device can also be programmed and erased using standard EPROM programmers. 2. FEATURES

• Single 3.3-volt operations: − 3.3-volt Read − 3.3-volt Erase − 3.3-volt Program
• Fast Program operation: − Byte-by-Byte programming: 9 μS (typ.) (V PP = 12V) − Byte-by-Byte programming: 12 μS (typ.) (V PP = Vcc)
• Fast Erase operation: − Sector erase 0.6 Sec. (typ.)
• Fast Read access time: Tkq 11 nS
• Endurance: 10K cycles (typ.)
• Twenty-year data retention
• 8 Even sectors with 64K bytes
• Any individual sector can be erased
• Hardware protection: − #TBL supports 64-Kbyte Boot Block hardware protection − #WP supports the whole chip except Boot Block hardware protection
• Low power consumption − Active current: 15 mA (typ. for FWH read mode)
• Automatic program and erase timing with internal V PP generation
• End of program or erase detection − Toggle bit − Data polling
• Latched address and data
• TTL compatible I/O
• Available packages: 32L PLCC, 32L STSOP 32L PLCC Lead free, 32L STSOP Lead free

• 4 - 3. PIN CONFIGURATIONS Firmware Hub (FWH) Mode #WE(FWH4) DQ4(RSV) DQ3(FWH3) DQ7(RSV) DQ6(RSV) #OE(#INIT) DQ5(RSV) 32L STSOP 24

17 A3(ID3)

R/#C(CLK) NC V DD A10(FGPI4) Vpp A9(FGPI3) A8(FGPI2) #RESET A7(FGPI1) A6(FGPI0) A2(ID2) A1(ID1) A0(ID0) DQ2(FWH2) DQ1(FWH1) DQ0(FWH0) A5(#WP) A4(#TBL) VSS VSS NC NC A F G P I v 30 31 32123 4 20 1918 17 16 1514 D Q F W H v V S S D Q R S V v R E S E T V D D R C C L K v A F G P I v 32L PLCC DQ0(FWH0) A7(FGPI1) A6(FGPI0) A4(#TBL) A3(ID3) A2(ID2) A1(ID1) A0(ID0) A5(#WP) IC DQ7(RSV) #WE(FWH4) #OE(#INIT) NC A F G P I v D Q F W H v D Q F W H v D Q R S V v D Q R S V v V SS RY/#BY(RSV) V DD NC V P P RY/#BY(RSV) 4. BLOCK DIAGRAM Program- mer Interface 6FFFF 00000 20000 1FFFF 10000 0FFFF #RESET IC A[10:0] DQ[7:0] #OE #WE R/#C FWH Interface CLK FWH4 FWH[3:0] 60000 5FFFF 64K BYTES BLOCK 0 30000 2FFFF #INIT #WP #TBL 50000 4FFFF 40000 3FFFF 64K BYTES BLOCK 1 64K BYTES BLOCK 2 64K BYTES BLOCK 5 64K BYTES BLOCK 6 64K BYTES BLOCK 7 RY/#BY 64K BYTES BLOCK 3 64K BYTES BLOCK 4 7FFFF 70000 5. PIN DESCRIPTION INTERFACESYM. PGM FWH PIN NAME IC * * Interface Mode Selection #RESET * * Reset #INIT * Initialize #TBL * Top Boot Block Lock #WP * Write Protect CLK * CLK Input FGPI[4:0] * General Purpose Inputs ID[3:0] * Identification Inputs They Are Internal Pull Down to Vss FWH[3:0] * Address/Data Inputs FWH4 * FWH Cycle Initial R/#C * Row/Column Select A[10:0] * Address Inputs DQ[7:0] * Data Inputs/Outputs #OE * Output Enable #WE * Write Enable RY/#BY * Ready/ Busy VDD * * Power Supply VSS * * Ground VPP * * Accelerate Program Power Supply RSV * * Reserved Pins NC * * No Connection

Publication Release Date: December 12, 2005 - 5 - Revision A4 6. FUNCTIONAL DESCRIPTION

6.1 Interface Mode Selection and Description

This device can operate in two interface modes, one is Programmer interface mode, and the other is FWH interface mode. The IC (Mode) pin of t he device provides the control between these two interface modes. These interface modes need to be configured before power up or return from #RESET. When IC (Mode) pin is set to V DD, the device will be in the Programmer mode; while the IC (Mode) pin is set to low state (or leaved no connec tion), it will be in the FWH mode. In Programmer mode, this device just behaves like traditional flas h parts with 8 data lines. But the row and column address inputs are multiplexed. The row address ar e mapped to the higher internal address A[18:11]. And the column address are mapped to the lower internal address A[10:0]. For FWH mode, it complies with the FWH Interface Specification, through the FWH[3:0] to communicate with the system chipset .

6.2 Read (Write) Mode

In Programmer interface mode, the read (write) operation of the W39V040FB is controlled by #OE (#WE). The #OE (#WE) is held low for the host to obtain (write) data from (t o) the outputs (inputs). #OE is the output control and is used to gate data from the output pins. The data bus is in high impedance state when #OE is high. As for in the FWH interface mode, the read or write is determined by the "bit 0 & bit 1 of START CYCLE ". Refer to the FWH cycle definition and timing waveforms for further details.

6.3 Reset Operation

The #RESET input pin can be used in some applicat ion. When #RESET pin is at high state, the device is in normal operation mode. When #RESET pin is at low state, it will halt the device and all outputs will be at high impedance state. As the high state re-asserted to the #RESET pin, the device will return to read or standby mode, it depends on the control signals.

6.4 Boot Block Operation and Hardware Protection at Initial- #TBL & #WP

There is a hardware method to protect the top boot block and other sectors. Before power on programmer, tie the #TBL pin to low state and then the top boot block will not be programmed/erased. If #WP pin is tied to low state before power on, the other sectors will not be programmed/erased. In order to detect whether the boot block featur e is set on or not, users can perform software command sequence: enter the product ident ification mode (see Command Codes for Identification/Boot Block Lockout Detection for specific code), and then read from address 7FFF2(hex). You can check the DQ2/DQ3 at the address 7FFF2 to see whether the #TBL/#WP pin is in low or high state. If the DQ2 is “0”, it means the #TBL pin is tied to high state. In such condition, whether boot block can be programmed/erased or not will depend on software setting. On the other hand, if the DQ2 is “1”, it means the #TBL pin is tied to low state, then boot block is locked no matter how the software is set. Like the DQ2, the DQ3 invers ely mirrors the #WP state. If the DQ3 is “0”, it means the #WP pin is in high state, then all the sectors except the boot block can be programmed/erased. On the other hand, if the DQ3 is “1”, then all the sectors except the boot block are programmed/erased inhibited.

• 6 - To return to normal operation, perform a three- byte command sequence (or an alternate single-byte command) to exit the identification mode. Fo r the specific code, see Command Codes for Identification/Boot Block Lockout Detection.

6.5 Sector Erase Command

Sector erase is a six-bus cycles operation. There ar e two "unlock" write cycles, followed by writing the "set-up" command. Two more "unlo ck" write cycles then follows by the Sector erase command. The Sector address (any address location within the des ired Sector) is latched on the rising edge of R/#C in programmer mode, while the command (30H) is latched on the rising edge of #WE. Sector erase does not require the user to program the device prior to erase. When erasing a Sector, the remaining unselected sectors are not affected. The system is not required to provide any controls or timings during these operations. The automatic Sector erase begins after the eras e command is completed, right from the rising edge of the #WE pulse for the last Sector erase command pulse and terminates when the data on DQ7, Data Polling, is "1" at which time the device returns to the read mode. Data Polling must be performed at an address within any of the sectors being erased. Refer to the Erase Command flow Chart using typical command strings and bus operations.

6.6 Program Operation

The W39V040FB is programmed on a byte-by-byte basis. Program operation can only change logical data "1" to logical data "0." The erase operation, which changed entire data in main memory and/or boot block from "0" to "1", is needed before programming. The program operation is initiated by a 4-by te command cycle (see Command Codes for Byte Programming). The device will internally enter t he program operation immediately after the byte- program command is entered. The internal progr am timer will automatically time-out (12μS typ. - TBP) once it is completed and then return to normal read mode. Data polling and/or Toggle Bits can be used to detect end of program cycle.

6.7 Hardware Data Protection

The integrity of the data stored in the W39V040FB is also hardware protected in the following ways: (1) Noise/Glitch Protection: A #WE pulse of less than 5 nS in duration will not initiate a write cycle. (2) VDD Power Up/Down Detection: The programming and read operation are inhibited when V DD is less than 2.0V typical. (3) Write Inhibit Mode: Forcing #OE low or #WE hi gh will inhibit the write operation. This prevents inadvertent writes during power-up or power-down periods.

6.8 WRITE OPERATION STATUS

The device provides several bits to determine the st atus of a program or er ase operation: DQ5, DQ6, and DQ7. Each of DQ7 and DQ6 provides a method for determining whether a program or erase operation is complete or in progress. The devic e also offers a hardware-based output signal, RY/#BY in programmer mode, to determine whether an Em bedded Program or Erase operation is in progress or has been completed.

Publication Release Date: December 12, 2005 - 7 - Revision A4 DQ7: #Data Polling The #Data Polling bit, DQ7, indicates whether an Embedded Program or Erase algorithm is in progress or completed. Data Polling is valid after the rising edge of the final #WE pulse in the command sequence. During the Embedded Program algorithm, the device outputs on DQ7 and the complement of the data programmed to DQ7. Once the Embedded Program al gorithm has completed, the device outputs the data programmed to DQ7. The system must prov ide the program address to read valid status information on DQ7. If a program address falls with in a protected sector, #Data Polling on DQ7 is active for about 1μS, and then the device returns to the read mode. During the Embedded Erase algorithm, #Data Po lling produces “0” on DQ7. Once the Embedded Erase algorithm has completed, #Data Polling produc es “1” on DQ7. An address within any of the sectors selected for erasure must be provided to read valid status information on DQ7. Just before the completion of an Embedded Pr ogram or Erase operation, DQ7 may change asynchronously with DQ0-DQ6 while Output Enable (#OE) is set to low. That is, the device may change from providing status information to va lid data on DQ7. Depending on when it samples the DQ7 output, the system may read the status or va lid data. Even if the dev ice has completed the program or erase operation and DQ7 has valid data, the data outputs on DQ0-DQ6 may be still invalid. Valid data on DQ7-DQ0 will appear on successive read cycles. RY/#BY: Ready/#Busy The RY/#BY is a dedicated, open-drain output pin which indicates whether an Embedded Algorithm is in progress or complete. The RY/#BY status is valid after the rising edge of the final #WE pulse in the command sequence. Since RY/#BY is an open-drain output, several RY/#BY pins can be tied together in parallel with a pull-up resistor to VDD. When the output is low (Busy), the device is actively erasing or programming. When the output is high (Ready), the device is in the read mode or standby mode. DQ6: Toggle Bit Toggle Bit on DQ6 indicates whether an Embedded Progr am or Erase algorithm is in progress or complete. Toggle Bit I may be read at any address, and is valid after the rising edge of the final #WE pulse in the command sequence (before the program or erase operation), and during the sector erase time-out. During an Embedded Program or Erase algorithm operat ion, successive read cycles to any address cause DQ6 to toggle. The system may use either #OE or #CE to control the read cycles. Once the operation has completed, DQ6 stops toggling. The system can use DQ6 to determine whether a sector is actively erasing. If the device is actively erasing (i.e., the Embedded Erase algorithm is in progress), DQ6 toggles. If a program address falls within a protected sector, DQ6 toggles for about 1 μs after the program command sequence is written, and then returns to reading array data. DQ5: Exceeded Timing Limits DQ5 indicates whether the program or erase time has exceeded a specified internal pulse count limit. DQ5 produces “1” under these conditions which indica tes that the program or erase cycle was not successfully completed.

• 8 - The device may output “1” on DQ5 if the system tries to program “1” to a location that was previously programmed to “0.” Only the erase operation can change “0” back to “1.” Under this condition, the device stops the operation, and while the timing limit has been exceeded, DQ5 produces “1.” Under both these conditions, the system must hardware reset to return to the read mode. 7. REGISTER FOR FWH MODE There are three kinds of registers on this device, the General Purpose Input Registers, the Block Lock Control Registers and Product Ident ification Registers. Users c an access these registers through respective address in the 4Gbytes memory map. There are detail descriptions in the sections below.

7.1 General Purpose Inputs Register for FWH Mode

This register reads the FGPI[4:0] pins on the W 39V040FB.This is a pass-through register which can read via memory address FFBC0100(hex). Since it is pass-through register, there is no default value. GPI Register Table BIT FUNCTION 7 − 5 Reserved

4 Read FGPI4 pin status

3 Read FGPI3 pin status

2 Read FGPI2 pin status

1 Read FGPI1 pin status

0 Read FGPI0 pin status

7.2 Product Identification Registers

In the FWH interface mode, a read from FFBC, 0000(hex) can output t he manufacturer code, DA(hex). A read from FFBC, 0001(hex) can output the device code 54(hex). There is an alternative software method to read out the Product Identification in both the Programmer interface mode and the FWH interface mode. Thus , the programming equipment can automatically matches the device with its proper erase and programming algorithms. In the software access mode, a or JEDEC 3- byte command sequence can be used to access the product ID for programmer interface mode. A r ead from address 0000(hex) outputs the manufacturer code, DA(hex). A read from address 0001(hex) out puts the device code, 54(hex). The product ID operation can be terminated by a three-byte command sequence or an alternate one-byte command sequence (see Command Definition table for detail).

7.3 Block Locking Registers

This part provides 8 even 64Kbytes blocks, and each block can be locked by register control. These control registers can be set or clear through memory address. Below is the detail description. Please note that this feature is only can be applied on FWH mode.

Publication Release Date: December 12, 2005 - 9 - Revision A4 Block Locking Registers type and access memory map Table REGISTERS REGISTERS TYPE CONTROL BLOCK DEVICE PHYSICAL ADDRESS 4GBYTES SYSTEM MEMORY ADDRESS BLR7 R/W 7 7FFFFh – 70000h FFBF0002h BLR6 R/W 6 6FFFFh – 60000h FFBE0002h BLR5 R/W 5 5FFFFh – 50000h FFBD0002h BLR4 R/W 4 4FFFFh – 40000h FFBC0002h BLR3 R/W 3 3FFFFh – 30000h FFBB0002h BLR2 R/W 2 2FFFFh – 20000h FFBA0002h BLR1 R/W 1 1FFFFh – 10000h FFB90002h BLR0 R/W 0 0FFFFh – 00000h FFB80002h Block Locking Register Bits Function Table BIT FUNCTION 7 – 3 Reserved Read Lock 1: Prohibit to read in the block where set 0: Normal read operation in the block where clear. This is default state. Lock Down 1: Prohibit further to set or clear the Read Lock or Write Lock bits. This Lock Down Bit can only be set not clear. Only the dev ice is reset or re-powered, the Lock Down Bit is cleared. 0: Normal operation for Read Lock or Write Lock. This is the default state. Write Lock 1: Prohibited to write in the block where set. This is default state. 0: Normal programming/erase operation in the block where clear.

7.4 Register Based Block Locking Value Definitions Table

BIT [7:3] BIT 2 BIT 1 BIT 0 RESULT 00000 0 0 0 Full Access. 00000 0 0 1 Write Lock. Default State. 00000 0 1 0 Locked Open (Full Access, Lock Down). 00000 0 1 1 Write Locked, Locked Down. 00000 1 0 0 Read Locked. 00000 1 0 1 Read & Write Locked. 00000 1 1 0 Read Locked, Locked Down. 00000 1 1 1 Read & Write Locked, Locked Down.

• 10 -

7.5 Read Lock

Any attempt to read the data of read locked block will re sult in “00H.” The default state of any block is unlocked upon power up. User can clear or set the wr ite lock bit anytime as long as the lock down bit is not set.

7.6 Write Lock

This is the default state of blocks upon power up. Befo re any program or erase to the specified block, user should clear the write lock bit first. User can cl ear or set the write lock bit anytime as long as the lock down bit is not set. The write lock function is in conjunction with the hardware protect pins, #WP & TBL. When hardware protect pins are enabled, it w ill override the register block locking functions and write lock the blocks no matter how the status of t he register bits. Reading the register bit will not reflect the status of the #WP or #TBL pins.

7.7 Lock Down

The default state of lock down bit for any block is unl ocked. This bit can be set only once; any further attempt to set or clear is ignored. Only the rese t from #RESET or #INIT can clear the lock down bit. Once the lock down bit is set for a block, then the wr ite lock bit & read lock bit of that block will not be set or cleared, and keep its current state.

7.8 Product Identification Registers

In the FWH interface mode, a read from FFBC, 0000(hex) can output t he manufacturer code, DA(hex). A read from FFBC,0001(hex) can output the device code 54(hex). There is an alternative software method (six commands bytes) to read out the Product Identification in both the Programmer interface mode and the FWH interface mode. Thus, the programming equipment can automatically matches the device with its proper erase and programming algorithms. In the software access mode, a six-byte (o r JEDEC 3-byte) command sequence can be used to access the product ID for programmer interface mode. A read from address 0000(hex) outputs the manufacturer code, DA(hex). A read from addre ss 0001(hex) outputs the devic e code, 54(hex). The product ID operation can be terminated by a three-byte command sequence or an alternate one-byte command sequence (see Command Definition table for detail).

Publication Release Date: December 12, 2005 - 11 - Revision A4 8. TABLE OF OPERATING MODES

8.1 Operating Mode Selection - Programmer Mode

#OE #WE #RESET ADDRESS DQ. Read VIL VIH VIH AIN Dout Write VIH VIL VIH AIN Din Standby X X VIL X High Z VIL X VIH X High Z/DOUT Write Inhibit X VIH VIH X High Z/DOUT Output Disable VIH X VIH X High Z

8.2 Operating Mode Selection - FWH Mode

Operation modes in FWH interface mode are determi ned by "START Cycle" w hen it is selected. When it is not selected, its output s (FWH[3:0]) will be disable. Please reference to the "FWH Cycle Definition".

8.3 FWH Cycle Definition

FIELD NO. OF CLOCKS DESCRIPTION START 1 "1101b" indicates FWH Memory Read cycle; while "1110b" indicates FWH Memory Write cycle. 0000b" appears on FWH bus to indicate the initial IDSEL 1 This one clock field indicates which FWH component is being selected. MSIZE 1 Memory Size. There is always show “0000b” for single byte access. TAR 2 Turned Around Time ADDR 7 Address Phase for Memory Cycle. FWH supports the 28 bits address protocol. The addresses transfer most significant nibble first and least significant nibble last. (i.e. Address[27:24] on FWH[3:0] first, and Address[3:0] on FWH[3:0] last.) SYNC N Synchronous to add wait state. "0000b" means Ready, "0101b" means Short Wait, "0110b" means Long Wait, "1001b" for DMA only, "1010b" means error, and other values are reserved. DATA 2 Data Phase for Memory Cycle. The data transfer least significant nibble first and most significant nibble last. (i.e. DQ[3:0] on FWH[3:0] first, then DQ[7:4] on FWH[3:0] last.)

• 12 - 9. TABLE OF COMMAND DEFINITION COMMAND NO. OF 1ST CYCLE 2ND CYCLE 3RD CYCLE 4TH CYCLE 5TH CYCLE 6TH CYCLE Read 1 AIN DOUT Sector Erase 6 5555 AA 2AAA 55 5555 80 5555 AA 2AAA 55 SA (5) Byte Program 4 5555 AA 2AAA 55 5555 A0 AIN DIN Product ID Entry 3 5555 AA 2AAA 55 5555 90 Product ID Exit (4) 3 5555 AA 2AAA 55 5555 F0 Product ID Exit (4)

1 XXXX F0

Notes: 1. The cycle means the write command cycle not the FWH clock cycle. 2. The Column Address / Row Address are mapped to the Low / High order Internal Address. i.e. Column Address A[10:0] are mapped to the internal A[10:0], Row Address A[7:0] are mapped to the internal A[18:11] 3. Address Format: A14 −A0 (Hex); Data Format: DQ7-DQ0 (Hex) 4. Either one of the two Product ID Exit commands can be used. 5. SA: Sector Address SA = 7XXXXh for Unique Sector7 (Boot Sector) SA = 3XXXXh for Unique Sector3 SA = 6XXXXh for Unique Sector6 SA = 2XXXXh for Unique Sector2 SA = 5XXXXh for Unique Sector5 SA = 1XXXXh for Unique Sector1 SA = 4XXXXh for Unique Sector4 SA = 0XXXXh for Unique Sector0

Publication Release Date: December 12, 2005 - 13 - Revision A4

9.1 Embedded Programming Algorithm

Write Program Command Sequence (see below) Programming Completed 5555H/AAH 2AAAH/55H 5555H/A0H Program Address/Program Data #Data Polling/ Toggle bit Program Command Sequence (Address/Command):

• 14 -

9.2 Embedded Erase Algorithm

Write Erase Command Sequence (see below) Erasure Completed #Data Polling or Toggle Bit 5555H/AAH 5555H/AAH 2AAAH/55H 2AAAH/55H 5555H/80H Sector Address/30H (Address/Command): Individual Sector Erase Command Sequence

Publication Release Date: December 12, 2005 - 15 - Revision A4

9.3 Embedded #Data Polling Algorithm

(DQ0 - DQ7) Address = SA Pass DQ7 = Data Yes Fail DQ5 = 1No Read Byte (DQ0 - DQ7) Address = SA DQ7 = Data Yes No Yes No Note: SA = Valid address for programming .During a sector erase operation, a valid address is an address within any sector selected for erasure.

• 16 -

9.4 Embedded Toggle Bit Algorithm

(DQ0-DQ7) Start Read Byte (DQ0-DQ7) DQ5 = 1 ? Read Byte (DQ0-DQ7) Twin Toggle Bit =Toggle ? Toggle Bit =Toggle ? Fail No Yes No Note: Recheck toggle bit because it may stop toggling as DQ5 changes to “1”.

Publication Release Date: December 12, 2005 - 17 - Revision A4

9.5 Software Product Identification and Boot Block Lockout Detection Acquisition

Entry (1) Load data 55 to address 2AAA Load data 90 to address 5555 Pause 10 S Product Identification and Boot Block Lockout Detection Mode (3) Read address = 00000 data = DA Read address = 00001 data = 54 Read address = 7FFF2 Check DQ[3:0] of data outputs (4) Product Identification Exit(6) Load data 55 to address 2AAA Load data F0 to address 5555 Normal Mode (5) (2) (2) Load data AA to address 5555 μ Load data AA to address 5555 Pause 10 Sμ Notes for software product identification/boot block lockout detection: (1) Data Format: DQ7−DQ0 (Hex); Address Format: A14−A0 (Hex) (2) A1−A18 = VIL; manufacture code is read for A0 = VIL; device code is read for A0 = VIH. (3) The device does not remain in identification and boot block lockout detection mode if power down. (4) The DQ[3:2] to indicate the sectors protect status as below: DQ2 DQ3 0 64Kbytes Boot Block Unlocked by #TBL hardware trapping Whole Chip Unlocked by #WP hardware trapping Except Boot Block 1 64Kbytes Boot Block Locked by #TBL hardware trapping Whole Chip Locked by #WP hardware trapping Except Boot Block (5) The device returns to standard operation mode. (6) Optional 1-write cycle (write F0 (hex.) at XXXX address) can be used to exit the product identification/boot block lockout detection.

• 18 - 10. ELECTRICAL CHARACTERISTICS

10.1 Absolute Maximum Ratings

Operating Temperature 0 to +70 °C Storage Temperature -65 to +150 °C Power Supply Voltage to VSS Potential -0.5 to +4.0 V D.C. Voltage on Any Pin to Ground Potential -0.5 to VDD +0.5 V VPP Voltage -0.5 to +13 V Transient Voltage (<20 nS) on Any Pin to Ground Potential -1.0 to VDD +0.5 V Note: Exposure to conditions beyond those listed under Absolute Maximum Ratings May adversely affect the life and reliability of the device.

10.2 Programmer interface Mode DC Operating Characteristics

(VDD = 3.3V ± 0.3V, VSS= 0V, TA = 0 to 70° C) LIMITS PARAMETER SYM. TEST CONDITIONS MIN. TYP. MAX. UNIT Power Supply Current ICC In Read or Write mode, all DQs open Address inputs = 3.0V/0V, at f = 3 MHz - 15 30 mA Input Leakage Current ILI VIN = VSS to VDD - - 90 μA Output Leakage Current ILO VOUT = VSS to VDD - - 90 μA Input Low Voltage VIL - -0.5 - 0.8 V Input High Voltage VIH - 2.0 - VDD +0.5 V Output Low Voltage VOL IOL = 2.1 mA - - 0.45 V Output High Voltage VOH IOH = -0.1mA 2.4 - - V

Publication Release Date: December 12, 2005 - 19 - Revision A4

10.3 FWH Interface Mode DC Operating Characteristics

(VDD = 3.3V ± 0.3V, VSS= 0V, TA = 0 to 70° C) LIMITS PARAMETER SYM. TEST CONDITIONS MIN. TYP. MAX. UNIT Power Supply Current Read ICC All Iout = 0A, CLK = 33 MHz, in FWH mode operation. - 15 25 mA Power Supply Current Program/Erase ICC CLK = 33 MHz, in FWH mode operation. - 18 30 mA Standby Current 1 Isb1 FWH4 = 0.9 VDD, CLK = 33 MHz, all inputs = 0.9 VDD / 0.1 VDD no internal operation - 20 50 uA Standby Current 2 Isb2 FWH4 = 0.1 VDD, CLK = 33 MHz, all inputs = 0.9 VDD /0.1 VDD no internal operation. - 3 10 mA Input Low Voltage VIL - -0.5 - 0.3 VDD V Input Low Voltage of #INIT VILI - -0.5 - 0.2 VDD V Input High Voltage VIH - 0.5 VDD - VDD +0.5 V Input High Voltage of #INIT Pin VIHI - 1.35 V - VDD +0.5 V Output Low Voltage VOL IOL = 1.5 mA - - 0.1 VDD V Output High Voltage VOH IOH = -0.5 mA 0.9 VDD - - V

10.4 Power-up Timing

PARAMETER SYMBOL TYPICAL UNIT Power-up to Read Operation TPU. READ 100 μS Power-up to Write Operation TPU. WRITE 5 mS

10.5 Capacitance

(VDD = 3.3V, TA = 25° C, f = 1 MHz) PARAMETER SYMBOL CONDITIONS MAX. UNIT I/O Pin Capacitance CI/O VI/O = 0V 12 pf Input Capacitance CIN VIN = 0V 6 pf

• 20 -

10.6 Programmer Interface Mode AC Characteristics

Input Pulse Levels 0V to 0.9 VDD Input Rise/Fall Time < 5 nS Input/Output Timing Level 1.5V/1.5V Output Load 1 TTL Gate and CL = 30 pF AC Test Load and Waveform +3.3V 1.8K 1.3K DOUT Ω Ω 30 pF (Including Jig and Scope) Input 0.9VDD Test Point Test Point 1.5V 1.5V Output

Publication Release Date: December 12, 2005 - 21 - Revision A4 Programmer Interface Mode AC Characteristics, continued

10.7 Read Cycle Timing Parameters

(VDD = 3.3V ± 0.3V, VSS = 0V, TA = 0 to 70° C) W39V040FB PARAMETER SYMBOL MIN. MAX. UNIT Read Cycle Time TRC 350 - nS Row / Column Address Set Up Time TAS 50 - nS Row / Column Address Hold Time TAH 50 - nS Address Access Time TAA - 150 nS Output Enable Access Time TOE - 75 nS #OE Low to Active Output TOLZ 0 - nS #OE High to High-Z Output TOHZ - 35 nS Output Hold from Address Change TOH 0 - nS

10.8 Write Cycle Timing Parameters

PARAMETER SYMBOL MIN. TYP. MAX. UNIT Reset Time TRST 1 - - μS Address Setup Time TAS 50 - - nS Address Hold Time TAH 50 - - nS R/#C to Write Enable High Time TCWH 50 - - nS #WE Pulse Width TWP 100 - - nS #WE High Width TWPH 100 - - nS Data Setup Time TDS 50 - - nS Data Hold Time TDH 50 - - nS #OE Hold Time TOEH 0 - - nS Byte programming Time TBP - 12 200 μS Sector Erase Cycle Time (Note 2) TPEC - 0.6 6 S Program/Erase Valid to RY/#BY Delay TBUSY 90 - - nS Notes: 1. All AC timing signals observe the following guidelines for determining setup and hold times: (a) High level signal's reference level is input high and (b) low level signal's reference level is input low. Ref. to the AC testing condition. 2. Exclude 00H pre-program prior to erasure. (In the pre-programming step of the embedded erase algorithm, all bytes are programmed to 00H before erasure

10.9 Data Polling and Toggle Bit Timing Parameters

W39V040FB PARAMETER SYMBOL MIN. MAX. UNIT #OE to Data Polling Output Delay TOEP - 350 nS #OE to Toggle Bit Output Delay TOET - 350 nS Toggle or Polling interval - 50 - mS

• 22 - 11. TIMING WAVEFORMS FOR PROGRAMMER INTERFACE MODE

11.1 Read Cycle Timing Diagram

DQ[7:0] High-Z #OE #WE VIH TOH TAA Data Valid TOHZ High-Z TOLZ TOE #RESET A[10:0] TRC R/#C TAS TAH Row AddressColumn Address TAS TAH Column Address Row Address TRST

11.2 Write Cycle Timing Diagram

DQ[7:0] #OE #WE #CR/ #RESET A[10:0] Column Address Row Address TRST TAS TAH

Publication Release Date: December 12, 2005 - 23 - Revision A4 Timing Waveforms for Programmer Interface Mode, continued

11.3 Program Cycle Timing Diagram

A[10:0] Byte 0 Byte 1 Byte 2 Internal Write Start DQ[7:0] #OE #WE Byte Program Cycle TBPTWPH TWP 5555 55552AAA AA A055 Programmed Address Data-In Byte 3 Note: The internal address A[18:0] are converted from external Column/Row address. Column/Row Address are mapped to the Low/High order internal address. i.e. Column Address A[10:0] are mapped to the internal A[10:0], Row Address A[7:0] are mapped to the internal A[18:11]. #C R/ (Internal A[18:0]) TBUSY RY/#BY 11.4 #DATA Polling Timing Diagram A[10:0] DQ7 #WE #OE X X X TOEP TBP #C R/ X (Internal A[18:0]) An An An An RY/#BY TBUSY

• 24 - Timing Waveforms for Programmer Interface Mode, continued

11.5 Toggle Bit Timing Diagram

A[10:0] DQ6 #WE #OE TOET TBP #C R/ RY/#BY

11.6 Sector Erase Timing Diagram

A[10:0] DQ[7:0] #OE #WE SB3 SB4 SB5 Internal Erase starts Six-byte code for 3.3V-only Sector Erase TWP TWPH TPEC 5555 2AAA 5555 5555 2AAA SA AA 55 80 AA 55 30 SA = Sector Address, Please ref. to the "Table of Command Definition" Note: The internal address A[18:0] are converted from external Column/Row addres Column/Row Address are mapped to the Low/High order internal address i.e. Column Address A[10:0] are mapped to the internal A[10:0], Row Address A[7:0] are mapped to the internal A[18:11]. #C R/ (Internal A[18:0]) TBUSY RY/#BY

Publication Release Date: December 12, 2005 - 25 - Revision A4 12. FWH INTERFACE MODE AC CHARACTERISTICS

12.1 AC Test Conditions

Input Pulse Levels 0.6 VDD to 0.2 VDD Input Rise/Fall Slew Rate 1 V/nS Input/Output Timing Level 0.4VDD / 0.4VDD Output Load 1 TTL Gate and CL = 10 pF

12.2 Read/Write Cycle Timing Parameters

(VDD = 3.3V ± 0.3V, VSS = 0V, TA = 0 to 70° C) PARAMETER SYMBOL W39V040FB UNIT MIN. MAX. Clock Cycle Time TCYC 30 - nS Input Set Up Time TSU 7 - nS Input Hold Time THD 0 - nS Clock to Data Valid TKQ 2 11 nS Note: Minimum and Maximum time have different load. Please refer to PCI specification.

12.3 Reset Timing Parameters

PARAMETER SYMBOL MIN. TYP. MAX. UNIT VDD stable to Reset Active TPRST 1 - - mS Clock Stable to Reset Active TKRST 100 - - μS Reset Pulse Width TRSTP 100 - - nS Reset Active to Output Float TRSTF - - 50 nS Reset Inactive to Input Active TRST 10 - - μS Note: All AC timing signals observe the following guidelines for determining setup and hold times: (a) High level signal's reference le vel is input high and (b) low level signal's reference level is input low. Please refer to the AC testing condition.

• 26 - 13. TIMING WAVEFORMS FOR FWH INTERFACE MODE

13.1 Read Cycle Timing Diagram

#RESET FWH[3:0] Start FWH Read IDSEL CLK

1 Clock2 Clocks

A[15:12] Address SyncTAR 1111b Tri-State0000b TKQTHDTSU Data out 2 Clocks D[7:4] Data D[3:0] Next Start

1 Clock

A[3:0] M Size XXXXb XA[22]XXb A[18:16]

1 Clock1 Clock

Note: When A22 = high, the host will read the BIOS code from the FWH device. While A22 = low, the host will read the GPI (Add = FFBC0100) or Product ID (Add = FFBC0000/FFBC0001) from the FWH device 1111b Tri-State

2 Clocks

13.2 Write Cycle Timing Diagram

#RESET FWH[3:0] Start FWH Write IDSEL CLK Next Start

1 Clock 1 Clock

A[15:12] Load Data in 2 Clocks D[7:4] Address Sync A[3:0] M Size XXXXb XXXXb 1111b Tri-StateA[18:16]

Publication Release Date: December 12, 2005 - 27 - Revision A4 Timing Waveforms for FWH Interface Mode, continued

13.3 Program Cycle Timing Diagram

#RESET FWH[3:0 ] 1st Start IDSEL Load Address "5555" in 7 Clocks CLK

1 Clock2 ClocksLoad Data "AA" in 2 Clocks

Write the 1st command to the device in FWH mode. 2nd Start Load Address "2AAA" in 7 Clocks 1 Clock2 ClocksLoad Data "55" in 2 Clocks 0101b 0101b Write the 2nd command to the device in FWH mode. FWH4 #RESET FWH[3:0 ] CLK #RESET CLK Address Address SyncTARData SyncTARData 1111b Tri-State 0000b 1111b Tri-State 0000b IDSEL 0000b 0000bX101b 0101b 0101b 0101b X010b 1010b 1010b 1010b M Size M Size XXXXbXXXXb XXXXbXXXXb XXXXb XXXXb Load Address "5555" in 7 Clocks 1 Clock2 ClocksLoad Data "A0" in 2 Clocks 1010b0000b Write the 3rd command to the device in FWH mode. FWH4 FWH[3:0 ] #RESET CLK Address SyncTARData 1111b Tri-State 0000b IDSEL 0000bX101b 0101b 0101b 0101b M Size XXXXbXXXXb XXXXb FWH[3:0 ] Sync Internal program start TAR A[15:12] Load Din in 2 Clocks D[7:4] Write the 4th command(target location to be programmed) to the device in FWH mode. A[11:8] A[7:4] A[3:0] D[3:0] 1111b Tri-State 0000b DataAddress Internal program start IDSEL 0000b M Size XXXXb A[18:16]XXXXb

• 28 - Timing Waveforms for FWH Interface Mode, continued 13.4 #DATA Polling Timing Diagram Read the DQ7 to see if the internal write complete or not. FWH4 #RESET FWH[3:0] Start Load Address in 7 Clocks CLK

An[15:12] Address SyncTAR 1111b Tri-State 0000bAn[11:8] An[7:4] An[3:0] Data out 2 Clocks Dn7,xxx Data XXXXb FWH4 #RESET FWH[3:0] Start Load Address in 7 Clocks CLK When internal write complete, the DQ7 will equal to Dn7. Dn7,xxxXXXXbAn[15:12] An[11:8] An[7:4] An[3:0] FWH4 #RESET FWH[3:0] Start Load Address "An" in 7 Clocks CLK An[15:12] Load Data "Dn" in 2 Clocks Dn[7:4] Write the last command(program or erase) to the device in FWH mode. Address SyncTARData 1111b Tri-State 0000bAn[11:8] An[7:4] An[3:0] Dn[3:0] IDSEL IDSEL IDSEL 0000b 0000b 0000b M Size M Size M Size XXXXbXXXXb XXXXb An[18:16]XXXXb XXXXb An[18:16]XXXXb An[18:16]

Publication Release Date: December 12, 2005 - 29 - Revision A4 Timing Waveforms for FWH Interface Mode, continued

13.5 Toggle Bit Timing Diagram

Read the DQ6 to see if the internal write complete or not. FWH4 #RESET Start Load Address in 7 Clocks CLK X,D6,XXb Data XXXXb FWH4 #RESET FWH[3:0] Start Load Address in 7 Clocks CLK When internal write complete, the DQ6 will stop toggle. X,D6,XXbXXXXb FWH4 #RESET FWH[3:0] Start Load Address "An" in 7 Clocks CLK A[15:12] Load Data "Dn" in 2 Clocks D[7:4] Write the last command(program or erase) to the device in FWH mode. Address SyncTARData 1111b Tri-State 0000bA[11:8] A[7:4] A[3:0] D[3:0] IDSEL XXXXb XXXXb XXXXb XXXXb XXXXb XXXXb XXXXb XXXXb IDSEL IDSEL 0000b 0000b 0000b M Size M Size M Size XXXXbXXXXb XXXXbXXXXb XXXXb A[18:16]XXXXb XXXXb XXXXb FWH[3:0]

• 30 - Timing Waveforms for FWH Interface Mode, continued Sector Erase Timing Diagram 6th Start Load Sector Address in 7 Clocks Sync Internal erase start

1 ClockLoad Din

Write the 6th command(target sector to be erased) to the device in FWH mode. 0000b TAR #RESET 1st Start Load Address "5555" in 7 Clocks CLK

1 Clock2 Clocks 1 Clock

Load Data "AA" in 2 Clocks 1010b 1010b Write the 1st command to the device in FWH mode. FWH4 #RESET FWH[3:0] CLK FWH4 #RESET FWH[3:0] CLK FWH4 #RESET CLK Address SyncTARData 2nd Start Load Address "2AAA" in 7 Clocks1 Clock1 Clock Start next command Load Data "55" in 2 Clocks 0101b 0101b Write the 2nd command to the device in FWH mode. 3rd Start Load Address "5555" in 7 Clocks1 Clocks1 Clocks Start next command

1 Clocks2 Clocks 1 Clocks

Load Data "80" in 2 Clocks 1000b0000b Write the 3rd command to the device in FWH mode. Address Address SyncTARData SyncTARData 1111b Tri-State 0000b 1111b Tri-State 0000b 1111b Tri-State 0000b 4th Start Load Address "5555" in 7 Clocks1 Clock1 Clock Start next command Load Data "AA" in 2 Clocks 1010b 1010b Write the 4th command to the device in FWH mode. 5th Start Load Address "2AAA" in 7 Clocks1 Clock1 Clock Start next command Load Data "55" in 2 Clocks 0101b 0101b Write the 5th command to the device in FWH mode. Address Address Sync #RESET FWH[3:0] CLK FWH4 #RESET FWH[3:0] CLK XXXXb XXXXb XXXXb IDSEL Internal erase start 0000b1110b IDSEL 0000b1110b IDSEL 0000b1110b IDSEL 0000b1110b IDSEL 0000b1110b IDSEL 0000b 0000b 0000b 0000b 0000b 0000b M Size M Size M Size M Size M Size M Size XXXXbXXXXb XXXXbXXXXb XXXXbXXXXb XXXXbXXXXb XXXXbXXXXb XXXXb A[18:16]XXXXb XXXXb XXXXb XXXXb XXXXb XXXXb TAR FWH[3:0] FWH4 FWH[3:0] XXXXb

Publication Release Date: December 12, 2005 - 31 - Revision A4 Timing Waveforms for FWH Interface Mode, continued

13.6 FGPI Register/Product ID Readout Timing Diagram

Note: During the GPI read out mode, the DQ[4:0] will capture the states(High or Low) of the FGPI[4:0] input pins. The DQ[7:5] are reserved pins #RESET FWH[3:0] Start IDSEL Load Address "FFBC0100(hex)" in 7 Clocks for GPI Register & "FFBC0000(hex)/FFBC0001(hex) for Product ID CLK D[7:4] Data 0000b 0001b /0000b 0000b 0000b 0000b M Size

13.7 Reset Timing Diagram

#RESET FWH[3:0] TPRST TKRST TRSTP TRSTF TRST FWH4

• 32 - 14. ORDERING INFORMATION PART NO. ACCESS TIME (nS) POWER SUPPLY CURRENT MAX. (mA) STANDBY VDD CURRENT MAX. (mA) PACKAGE W39V040FBP 11 30 10 32L PLCC W39V040FBQ 11 30 10 32L STSOP W39V040FBPZ 11 30 10 32L PLCC Lead free W39V040FBQZ 11 30 10 32L STSOP Lead free Notes: 1. Winbond reserves the right to make changes to its products without prior notice. 2. Purchasers are responsible for performing appropriate quality assurance testing on products intended for use in applications where personal injury might occur as a consequence of product failure. 15. HOW TO READ THE TOP MARKING Example: The top marking of 32-pin STSOP W39V040FBQ W39V040FBQ 2138977A-A12 345OBFA 1st line: Winbond logo 2nd line: the part number: W39V040FBQ 3rd line: the lot number 4th line: the tracking code: 345 O B FA 149: Packages made in ’03, week 45 O: Assembly house ID: A means ASE, O means OSE, ...etc. B: IC revision; A means version A, B means version B, ...etc. FA: Process code

Publication Release Date: December 12, 2005 - 33 - Revision A4 16. PACKAGE DIMENSIONS 16.1 32L PLCC Notes: L c H E E e b D HD y A Seating Plane EG G D 14 20 324 1. Dimensions D & E do not include interlead flash. 2. Dimension b1 does not include dambar protrusion/intrusio 3. Controlling dimension: Inches 4. General appearance spec. should be based on final visual inspection sepc. Symbol Dimension in Inches Dimension in mm A b c D e HE L y A A E b 1 GD 3.56 0.50 2.802.67 2.93 0.710.66 0.81 0.41 0.46 0.56 0.20 0.25 0.35 13.89 13.97 14.05 11.35 11.43 11.51 1.27 H D GE 12.45 12.95 13.46 9.91 10.41 10.92 14.86 14.99 15.11 12.32 12.45 12.57 1.91 2.29 0.004 0.0950.0900.075 0.4950.4900.485 0.5950.5900.585 0.4300.4100.390 0.5300.5100.490 0.050 0.4530.4500.447 0.5530.5500.547 0.0140.0100.008 0.0220.0180.016 0.0320.026 0.028 0.1150.105 0.110 0.020 0.140 1.12 1.420.044 0.056 0 10 100 0.10 2.41 θ θ 16.2 32L STSOP Min. Dimension in Inches Symbol 1.20 0.05 0.15 1.051.000.95 0.17 0.10 0.50 0.00 0.22 0.27 ----- 0.21 12.40 8.00 14.00 0.50 0.60 0.70 0.80 0.10 0.047 0.006 0.0410.0400.035 0.007 0.009 0.010 0.004 ----- 0.008 0.488 0.315 0.551 0.020 0.020 0.024 0.028 0.031 0.000 0.004 03 5 0.002A A b c D E e L L Y A HD θ Dimension in mm AA A Y E H D D c θ b e

• 34 - 17. VERSION HISTORY VERSION DATE PAGE DESCRIPTION A1 August 19, 2004 - Initial Issued A2 October 4, 2004 3, 17, 18, 20 Modify Isb1, Tbp, Tpec, Icc (read) Add Icc (program/erase) and Toggle or polling interval Power supply voltage to Vss potential A3 April 14, 2005 33 Add important notice Revise DQ5: Exceeded Timing Limits description, A4 Dec. 12, 2005 7, 16 Embedded Toggle Bit Algorithm Important Notice Winbond products are not designed, intended, authorized or warranted for use as components in systems or equipment intended for surgi cal implantation, atomic energy control instruments, airplane or spaceship instrument s, transportation instruments, traffic signal instruments, combustion control instruments, or for other applications intended to support or sustain life. Further more, Winbond products are not intended for applications wherein failure of Winbond products could result or lead to a situation wherein personal injury, death or severe property or environmental damage could occur. Winbond customers using or selling these products for use in such applications do so at their own risk and agree to fully indemnify Winbond for any damages resulting from such improper use or sales.