I have a firmware that I've dumped from a phone. I found a uImage header and a zImage after running binwalk. The header says that the image is uncompressed, however I've read that zImages are usually compressed with lzma, xz, gzip, etc. Does this mean the zImage is uncompressed and I can work with it directly, without decompressing it?
352768 0x56200 uImage header, header size: 64 bytes, header CRC: 0xFAAD7908, created: 2015-09-01 19:12:03, image size: 1283768 bytes, Data Address: 0xC8008000, Entry Point: 0xC8008000, data CRC: 0xB0AF08F8, OS: Linux, CPU: ARM, image type: OS Kernel Image, compression type: none, image name: "Linux-3.4.20-rt31-dvf-v1.2.6.1-r"
352832 0x56240 Linux kernel ARM boot executable zImage (little-endian)
binwalk
's entropy analysis tell you?