title: How to decode the section table in an ELF?
body: <p>I'm analyzing this tiny ELF file:</p>
  
  <pre><code>00000000  7f 45 4c 46 02 01 01 00  00 00 00 00 00 00 00 00  |.ELF............|
  00000010  02 00 3e 00 01 00 00 00  78 00 40 00 00 00 00 00  |..&gt;.....x.@.....|
  00000020  40 00 00 00 00 00 00 00  98 00 00 00 00 00 00 00  |@...............|
  00000030  00 00 00 00 40 00 38 00  01 00 40 00 03 00 02 00  |....@.8...@.....|
  00000040  01 00 00 00 05 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000050  00 00 40 00 00 00 00 00  00 00 40 00 00 00 00 00  |..@.......@.....|
  00000060  7e 00 00 00 00 00 00 00  7e 00 00 00 00 00 00 00  |~.......~.......|
  00000070  00 00 20 00 00 00 00 00  31 c0 ff c0 cd 80 00 2e  |.. .....1.......|
  00000080  73 68 73 74 72 74 61 62  00 2e 74 65 78 74 00 00  |shstrtab..text..|
  00000090  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  *
  000000d0  00 00 00 00 00 00 00 00  0b 00 00 00 01 00 00 00  |................|
  000000e0  06 00 00 00 00 00 00 00  78 00 40 00 00 00 00 00  |........x.@.....|
  000000f0  78 00 00 00 00 00 00 00  06 00 00 00 00 00 00 00  |x...............|
  00000100  00 00 00 00 00 00 00 00  01 00 00 00 00 00 00 00  |................|
  00000110  00 00 00 00 00 00 00 00  01 00 00 00 03 00 00 00  |................|
  00000120  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
  00000130  7e 00 00 00 00 00 00 00  11 00 00 00 00 00 00 00  |~...............|
  00000140  00 00 00 00 00 00 00 00  01 00 00 00 00 00 00 00  |................|
  00000150  00 00 00 00 00 00 00 00                           |........|
  00000158
  </code></pre>
  
  <p>I found documentation on the ELF header and the program header and decoded both of those, but I'm having problems decoding what's after this (starting with <code>31 c0 ff c0 cd 80 00 2e</code>). Judging by the "shstrtab" text, I am looking at the section table, but what does <code>31 c0 ff c0 cd 80 00 2e</code> mean? Where is this part documented?</p>