Hi, I'm trying to reverse the wii IOS in version which haven't been patched with the trucha bug. I download the ios app files with nus downloader, and download some functions signing and cpu def for ghidra (which is my usual reverse platform). Unfortunately, after few disassemblies of given app files, I think these are not the files I want to analyse (size quite low, missing many functions def, and so more).

My initial goal is to find the trucha bug during my searches, as I want to better studying how it can works. Could someone give me some hints or way to achieve this objective ?

Sure I've already read it, but I wan't to "experiment" by myself with IOS and especially with this bug.

In NUS Downloader, I check the "Decrypt files" box indeed, and the files seem not encrypted or something else.

I finally understood why despite all the patches installed to add function signatures in ghidra I couldn't see some functions (strncmp in particular). I actually didn't know that strncmp was actually memcmp according to Nintendo For the moment I still have difficulty to see the patch applied between IOS 36 and 37.