I'd check the flashing between the the two firewalls in the roof since that is the source of the leak. The rain or shine hydrolock should work since the leak is negative pressure.

Instructions for paint are usually printed on the bucket. You will most likely have to peel off the existing paint