Found out that if I use default modbus mapping in my PLC, it will work up to register 9997 (49999).
I cannot access register 10 000 by this method. If i try 410000 it will only give illegal datavalue.
Default mapping means that all request are automatically applied to the PLC media, this is a quite dangerous method.
When deactivating default mapping and doing manual mapping it does not work.
By manual mapping it means that i can choose:
Partner media type
Partner start address
Partner range
Map to PCD type
Map to PCD start address
Map to PCD range