I can reconstruct your message with my code, even got response from PLC. But in a response packet I'm always getting two Headers and Footers with some data that cannot understand what they represent.
In your example what actually represent length C4 ?