为啥不考虑修改PLC程序，把AIW、AQW映射到V区呢？你就非得跟规则过不去？

又或者你去下载snap7源码，自己修改编译也行啊。

嗯，下载了Snap7看了手册，是支持很多数据读写的：

S7 functions implemented (in the current release)

Data I/O (also via multivariable read/write) : Read/Write DB, Mk, IPI, IPQ, Timers, and Counters.

Directory : List Blocks, List Blocks of Type, Block info.

Control (1) : Run/Stop, Compress and Copy Ram to Rom.

Date and Time (2) : Get/Set PLC Date and Time.

System Info : Read SZL

Security : Get/Set session password (3).

最终建议还是把所有数据映射到V区，用DB1来访问吧。