Thanks!
Using this method, I've been trying to calculate the first ones to see If I got it right, but something is wrong...
This are the first pointers:
29C4, 29D0, 29D7, 29E3, 29EF, 29F4, 2A00, 2A0C, 2A13
The first 3 seem to be valid (they point to a byte right after a 00 byte). But 29E3, 29F4...