You want the offsets? Here is mine from 8.7:
TibiaExe = 0X1CDB94;
TibiaDat = 0X1CDBD4;
TibiaSpr = 0X1CDBF0;
TibiaPic = 0X1CDC0C;
Fields are 28 bytes long, and NULL terminated/padded.
TibiaCfg for 854+ is TibiaPic + 36, 12 chars long and NULL terminated/padded.
You gave me a new idea tho, I can make a customclient edit tool (upload .exe, then download the edited one).