Hi,
I've done this for frequency converter DP slaves.
I've written a small application which connects to Plcsim via S7-Prosim interface. It reads the control word, and then writes the status word back.
But you need to know how the behaviour of your original DP slave, as you have to reproduce this in your own simulation.
If you are using the process image (IW) in your program instead of using the peripheral image (PIW), then you could program the simulation in the plc program by overwriting the process image.