DemonDoor_Start                                .text 00E6E2E0 0000008B R . . . . . . 
DemonDoors                                     .text 00E75590 00000036 R . . . . . . 
Fisticuffs_Complete                            .text 00E82190 00000083 R . . . . . . 
Fisticuffs_Create                              .text 00E82220 000002AB R . . . . . . 
Fisticuffs_Crowd                               .text 00E83A20 0000019B R . . . . . . 
Fisticuffs_Cutscene                            .text 00E8A1D0 000000C8 R . . . . . . 
Fisticuffs_Introduced                          .text 00E84B50 00000021 R . . . . . . 
Fisticuffs_KHG_Win                             .text 00E8B020 000006D4 R . . . . . . 
Fisticuffs_Main_                               .text 00E84B80 0000226C R . . . . . . 
Fisticuffs_NPC_Create                          .text 00E8A2B0 00000CBF R . . . . . . 
Fisticuffs_Tyler                               .text 00E87030 00003107 R . . . . . . 
PAAWB_NPC                                      .text 00EC12E0 000000F1 R . . . . . . (Picnic Area After Wasp Battle script)
RPS_BANDIT_ARCHER                              .text 00EC32F0 000007BB R . . . . . . (Random Population Sim Script Functions)
RPS_BANDIT_GRUNT                               .text 00EC3AD0 000000D6 R . . . . . . 
RPS_Exit                                       .text 00EC1CD0 0000021C R . . . . . . 
RPS_Main                                       .text 00EC1850 0000008B R . . . . . . 
RPS_Morality                                   .text 00EC1EF0 00000344 R . . . . . . 
RPS_NPC                                        .text 00EC1910 0000024C R . . . . . . 
RPS_Spawn                                      .text 00EC29F0 00000739 R . . . . . . 
RPS_TRADER                                     .text 00EC3130 000000EB R . . . . . . 
SM_Main                                        .text 00ED3A90 0000008B R . . . . . . (Statue Master Functions)
SM_Markers                                     .text 00ED3B30 0000057A R . . . . . . 
S_QGT                                          .text 00D50600 00000047 R . . . . . . 
S_QGT_GuildTrain_Main                          .text 00D3BB50 0000008B R . . . . . . 
S_VPAAWB                                       .text 00EC1780 00000036 R . . . . . . 
S_VPAAWB_Main                                  .text 00EC1240 0000008B R . . . . . . 
S_VRPS                                         .text 00EC3BC0 00000039 R . . . . . . 
S_VSM                                          .text 00ED4A40 00000036 R . . . . . . 
ScriptMain                                     .text 00CDE2F0 00000036 R . . . . . . 
Script_Global                                  .text 00CE19A0 00000036 R . . . . . . 
TH_Cutscene_Triggers                           .text 00EDED10 00000583 R . . . . . . (Wandering heroes Script Functions)
TH_Main                                        .text 00EDEC70 0000008B R . . . . . . 
TH_Scenes                                      .text 00EE1DC0 00000077 R . . . . . . 

Dev Console = 0x009ED190

This has been disabled in some way.

Update: 

As far as I can tell, the console is intact, all the routines for initializing it, and it's graphics, etc, exist. (It's all running too, it's just never enabled by the game.)

Unknown = 0x0099EBF0

This takes two visible parameters. It also requires an object reference pointer in the register ECX. (Likely a "this" pointer.)

Update: 

I believe this is used by the games "IntelligentPointers", basically, if an object exist, it finds it, otherwise it creates it, and makes a pointer to it, for reference tracking\access, etc,.

Decrease Will:
0x0057B1F1 - (add [esi+58h], eax)

This could be used to remove magic cost, or, to create a multiplier to increase the cost.

Increase\Decrease Gold (Shops, maybe more..)
0x0057B338 - (mov [esi+3Ch], eax)

Static References:

GameDirectory = 0x013BCA10
HInstance = 0x013BD6EC

CThingManager = 0x013B8A1C
GraphicDataBank = 0x013B8A08
MeshDataBank = 0x013B8A04
QuestManager = 0x013B89FC
CGameJoystickManager = 0x013B89A0
CStreamingFontBank = 0x013B8998
CThingObjectDef 0x013B8C14
CInventoryItemDef 0x013B8C18
CUserProfileManager = 0x013B7D4C
CGraphicBankManager = 0x013B837C
CShaderRenderManager = 0x013B8380
CRenderManager = 0x013B8384
CInputManager = 0x013B8388
CFontManager = 0x013B838C
CDisplayManager = 0x013B8390
CSoundManager = 0x013B8394
CGame = 0x013B83D0
CMainGameComponent = 0x013B86A0
CManager@NUISystem = 0x013B8710
CPlayerDef = 0x013B878C 
CPlayerGUI = 0x013B8790
CGameDefinitionManager = 0x013B879C
CEngineManager = 0x013BA854
CTCAICreatureWillPowerIndicator = 0x013BA89C
CCameraModeDef = 0x013BA8D8
CSkeletalMorphResourceManager = 0x013BAB10

I haven't verified all of these, they could be static, or the values could be temporarily stored there. (I'll have to keep checking them, and make sure they always stay the same.)

I hit the damn static lottery. :)

These are the layouts of class instances mapped in memory.

CThingManager:

Base = CThingManager (VFTable: 0x01245C44)
Base + 1Ch = CMainGameComponent
Base + 20h = CGameDefinitionManager
Base + 24h = CWorld
Base + 28h = CWorldMap
Base + 30h = CPlayerManager
Base + 8Ch = Unknown

CPlayerManager:

Base = CPlayerManager (VFTable: 0x01231CD0)
Base + 0Ch = CPlayer
Base + 10h = Unknown
Base + 1Ch = Unknown

CPlayer:

Base = CPlayer (VFTable: 0x01231CC4)
Base + 0Ch = CGamePlayerInterface
Base + 34h = CIntelligentPointer@VCThingPlayerCreature

CIntelligentPointer@VCThingPlayerCreature:

Base + 4h = CThingPlayerCreature

CThingPlayerCreature:

Base = CThingPlayerCreature (VFTable: 0x012457FC)
Base + 0B0h = Max Health (Float)
Base + 0B4h = Current Health (Float)

CTCHeroStats:

Base = CTCHeroStats (VFTable: 0x0124F70C)
Base + 4h = CThingPlayerCreature (VFTable: 0x012457FC)
Base + 38h = Unknown
Base + 3Ch = Current Gold
Base + 40h = Highest Amount of Money Ever Had
Base + 48h = Total Money Acquired
Base + 4Ch = Total Money Spent
Base + 58h = Current Will
Base + 5Ch = Max Will
Base + 70h = Renown
Base + FCh = Total Fines

CSystemManager:

Base + 58h = CInputManager
Base + 60h = CDisplayManager
Base + 7Ch = CSoundManager
Base + 84h = CFontManager

CDisplayManager:

Base + 8h = CRenderManager

CDrawPerceivers@NPlayerGui:

Base + 38h = Perceiver Count

CGameCameraManager:

Base + 114h = Unknown
Base + 118h = Unknown
Base + 128h = Unknown

CInventoryItemDef:

Base + 4h = Unknown