Joint effort to add OpenPnP support for the Neoden 4 PnP machine.

The machines motion controller has the following coordinate system:

Left             (Back / Top)        Right
          (-437, 437)          (0,437)
             +-------------------+
             |                   |   Feeders
Feeders      |                   |   Up-looking camera
             |                   |   Feeders
             +-------------------+
          (-437, 0)            (0, 0)
                (Front / Bottom)

The protocol consists of a series of write / read sequences, most are single byte write / read sequences, but not all. The last byte of longer sequences (both when writing and reading) is a checksum of sorts. See the "Homing the head" command for a more detailed description of the protocol, with an actual example.

Format is:
write -> expected answer

NOTE! All move and homing commands are done with nozzles as high as possible. When no parts are attached nozzles are usually reset to top position before moving.

47 -> 0b
c7 -> 03
0100000000000000XX
07 -> 07
07 -> 43

XX is the checksom for the message.
The other strange thing you see is that there's no response on the long array of bytes, but rather after sending a single byte right after the long array of bytes. This is the same for most (all?) long array of bytes sent. The last write / read might be repeated, until the read is actually the correct response.

NOTE! Home seems to be (-437, 437), eg left top corner.

46 -> 0a
c6 -> 02
PP0900c800000000XX
06 -> 06
06 -> 42

PP is speed, in percentage (from 10 to 130 in the software, in increments of 10) 0a => 10% speed. XX is checksum

48 -> 05
c8 -> 0d
x1x2x3x4y1y2y3y4XX
08 -> 09
08 -> 4d

x1x2x3x4 is the X-coordinate in int32, little endian, in .01mm
y1y2y3y4 is the Y-coordinate in int32, little endian, in .01mm
XX is the checksum of the message.

41 -> 0d
c1 -> 05
d1d232NN00000000XX
01 -> 01
01 -> 45

XX is the checksum of the message.
d1d2 degrees of rotation in 0.1 units, int16, little endian. f8f8 = -1800, 0000 = 0, 0807 = 1800
NN is 01, 02, 03 or 04. For Nozzles 1-4.

42 -> 0e
c2 -> 06
h1h232NN00000000XX
02 -> 02
02 -> 46

XX is the checksum of the message.
NN is 01, 02, 03 or 04. For nozzles 1-4.
h1h2 is int16, little endian. Height of nozzle; 0000 is max retracted into head, e02e is max down.
In the neoden software it is visualised as 12.0 -> 0.0 (12.0 being max retracted into head).

43 -> 0f
c3 -> 07
PPNN000000000000XX 
03 -> 03
03 -> 47

XX is the checksum of the message.
NN is 01, 02, 03 or 04. For nozzle 1-4.
PPint8: 01-7f (1-127) => blow, 00 => idle, ff-80 (-1 - -128) => max suction.

40 -> 0c
00 -> 11
80 -> 19
   -> n1 n2 n3 n4 03 00 00 00 XX

XX is the checksum of the message.
n1 is the vacuum / pressure for nozzle 1, int8. Negative is vacuum
n2 is the vacuum / pressure for nozzle 2, int8. Negative is vacuum
n3 is the vacuum / pressure for nozzle 3, int8. Negative is vacuum
n4 is the vacuum / pressure for nozzle 4, int8. Negative is vacuum

44 -> 08
c4 -> 00
MM00000000000000XX
04 -> 04
04 -> 40

XX is the checksum of the message.
MM is the mode 00=off, 01=mode1, 02=mode2, 03=mode3.

47 -> 0b
c7 -> 03
00 00 00 00 MM 00 00 00 XX
07 -> 07
07 -> 43

XX is the checksom for the message.
MM flash mode, 00 = off; 01=mode1

3f -> 0c
NN -> R1
ff -> 00
NN -> R2
SS RR 00 00 00 00 00 00 XX
3f -> 0c    # Repeat,                                           .                
NN -> R3    # these two until response is R3

XX is the checksum of the message.
NN is feeder number, starting at 47==feeder 01.
R1, R2´, R3are response codes that varies per feeder.<br>SSis feed strength, 32 = 50%.<br>RR` is feed rate. 04 is used for 0402, for instance.

S1 -> R1
S2 -> R2   # repeat if response isn't R2
S3 -> R3
   -> MM 00 00 00 00 00 00 00 XX

XX is the checksum of the message (read).
S1, S2, S3, R1, R2, R3 are codes per feeder.
MM when MM is 20, the feeder is done / ready again. It's 00 if not.

Seen when using feeders: 1

5c -> 02
1c -> 1f   # repeat if response isn't 1f
9c -> 17
   -> MM 00 00 00 00 00 00 00 XX

XX is the checksum of the message (read).
MM when MM is 20, the feeder is done / ready again.

Seen when using feeders: 30

72 -> 0b / 1a  # Seen both 0b and 1a on same feeder
32 -> 16       # repeat if response isn't 16
b2 -> 1e
   -> MM 00 00 00 00 00 00 00 XX

XX is the checksum of the message (read).
MM when MM is 20, the feeder is done / ready again.

4c -> 01
cc -> 09
PPRRSS0000000000XX
0c -> 0d
0c -> 49

XX is the checksum of the message.
PP is the peeler number; 0e= peeler 14.
RR is the feedrate of the peeler; 10 = feedrate 16
SS is the strength of the peeler; 50 = 80% strength.

Seems like the peeler is always started before the feeder, when feeding components.

46 -> 0a
c6 -> 02
32 09 00 SS 00 00 00 00 XX
06 -> 06
06 -> 42

XX is the checksum for the message.
SS sets the speed of the rails. 14=10%, 28=20%, 3c=30%, etc up to c8=100%.

49 -> 04
c9 -> 0c
00000000c9030c00XX
09 -> 08
09 -> 4c

XX is the checksum for the message.

49 -> 04 
c9 -> 0c
0000000037fcf3ffXX 
09 -> 08
09 -> 4c

XX is the checksum for the message.

47 -> 0b
c7 -> 03
0002000000000000XX
07 -> 07
07 -> 43

XX is the checksum for the message.
Whenever you need to stop moving the rails, you issue this command.

47 -> 0b
c7 -> 03
00 00 00 00 00 ZZ 00 00 XX
07 -> 07
07 -> 43

XX is the checksom for the message.
ZZ toggle buzzer; 00=off (default); 01=on until turned off.

45 -> 09
05 -> 14
85 -> 1c
   -> 00 03 00 14 00 00 00 00 XX

XX is the checksum for the message.
This is repeated at a regular interval when running a job, or when being in the "Manual test" UI in the original application from Neoden. Currently unknown why and what it does.

https://imgur.com/a/osEGC