From 3a71f13fe377774c07fd8dfd6191b84d095102ea Mon Sep 17 00:00:00 2001
From: David Haywood <mamehaze@users.noreply.github.com>
Date: Thu, 23 May 2013 10:37:51 +0000
Subject: [PATCH] replace first rom of Ambush with a fresh dump, marked the old
 set as likely hacked [Ricky2001 (from AUMAP)]

---
 src/mame/drivers/ambush.c | 33 +++++++++++++++++++++++++++++++--
 src/mame/mame.lst         |  1 +
 2 files changed, 32 insertions(+), 2 deletions(-)

diff --git a/src/mame/drivers/ambush.c b/src/mame/drivers/ambush.c
index 0f2e9009272..25d197e62fa 100644
--- a/src/mame/drivers/ambush.c
+++ b/src/mame/drivers/ambush.c
@@ -265,10 +265,9 @@ MACHINE_CONFIG_END
  *
  *************************************/
 
-/* displays an M next to ROM 1 during the test, why is internal checksum wrong (0x02 instead of 0x00) ? */
 ROM_START( ambush )
 	ROM_REGION( 0x10000, "maincpu", 0 )
-	ROM_LOAD( "a1.i7",    0x0000, 0x2000, CRC(a7cd149d) SHA1(470ebe60bc23a7908fb96caef8074d65f8c57625) )
+	ROM_LOAD( "a1.i7",    0x0000, 0x2000, CRC(31b85d9d) SHA1(24e60d053cf70ea15430d970ac2385bdd7341ab1) )
 	ROM_LOAD( "a2.g7",    0x2000, 0x2000, CRC(8328d88a) SHA1(690f0af10a0550566b67ee570f849b2764448d15) )
 	ROM_LOAD( "a3.f7",    0x4000, 0x2000, CRC(8db57ab5) SHA1(5cc7d7ebdfc91fb8d9ed52836d70c1de68001402) )
 	ROM_LOAD( "a4.e7",    0x6000, 0x2000, CRC(4a34d2a4) SHA1(ad623161cd6031cb6503ff7445fdd9fb4ea83c8c) )
@@ -285,6 +284,35 @@ ROM_START( ambush )
 	ROM_LOAD( "14.bpr",       0x0300, 0x0100, CRC(622a8ce7) SHA1(6834f67874251f2ef3a33aec893311f5d10e496f) )  /* They don't look like color PROMs */
 ROM_END
 
+ROM_START( ambushh )
+	ROM_REGION( 0x10000, "maincpu", 0 )
+	/* displays an M ("Mal" is Bad in Spanish) next to ROM 1 during the test, why is internal checksum wrong (0x02 instead of 0x00) ? 
+	   I think the ROM has been hacked(?)
+	*/
+	ROM_LOAD( "a1_hack.i7",    0x0000, 0x2000, CRC(a7cd149d) SHA1(470ebe60bc23a7908fb96caef8074d65f8c57625) )
+	// 1A6D:	0C -> 00
+	// 1A75:	18 -> 0D
+	// 1A76:	D5 -> 18
+	// 1A77:	00 -> D6
+
+	ROM_LOAD( "a2.g7",    0x2000, 0x2000, CRC(8328d88a) SHA1(690f0af10a0550566b67ee570f849b2764448d15) )
+	ROM_LOAD( "a3.f7",    0x4000, 0x2000, CRC(8db57ab5) SHA1(5cc7d7ebdfc91fb8d9ed52836d70c1de68001402) )
+	ROM_LOAD( "a4.e7",    0x6000, 0x2000, CRC(4a34d2a4) SHA1(ad623161cd6031cb6503ff7445fdd9fb4ea83c8c) )
+
+	ROM_REGION( 0x4000, "gfx1", 0 )
+	ROM_LOAD( "fa2.n4",    0x0000, 0x2000, CRC(e7f134ba) SHA1(c38321f3da049f756337cba5b3c71f6935922f80) )
+	ROM_LOAD( "fa1.m4",    0x2000, 0x2000, CRC(ad10969e) SHA1(4cfccdc4ca377693e92d77cde16f88bbdb840b38) )
+
+	ROM_REGION( 0x0400, "proms", 0 )
+	ROM_LOAD( "a.bpr",        0x0000, 0x0100, CRC(5f27f511) SHA1(fe3ae701443ff50d3d03c0a5d0e0ab0e716b05cc) )  /* color PROMs */
+
+	ROM_LOAD( "b.bpr",        0x0100, 0x0100, CRC(1b03fd3b) SHA1(1a58b212476cacace6065056f23b59a69053a2f6) )    /* How is this selected, */
+	ROM_LOAD( "13.bpr",       0x0200, 0x0100, CRC(547e970f) SHA1(e2ec0bece49fb283e43549703d6d5d6f561c69a6) )  /* I'm not sure what these do. */
+	ROM_LOAD( "14.bpr",       0x0300, 0x0100, CRC(622a8ce7) SHA1(6834f67874251f2ef3a33aec893311f5d10e496f) )  /* They don't look like color PROMs */
+ROM_END
+
+
+
 ROM_START( ambushj )
 	ROM_REGION( 0x10000, "maincpu", 0 )
 	ROM_LOAD( "ambush.h7",    0x0000, 0x2000, CRC(ce306563) SHA1(c69b5c4465187a8eda6367d6cd3e0b71a57588d1) )
@@ -330,5 +358,6 @@ ROM_END
  *************************************/
 
 GAME( 1983, ambush,  0,      ambush,   ambusht, driver_device,  0, ROT0, "Tecfri",                            "Ambush", GAME_SUPPORTS_SAVE )
+GAME( 1983, ambushh, ambush, ambush,   ambusht, driver_device,  0, ROT0, "Tecfri",                            "Ambush (hack?)", GAME_SUPPORTS_SAVE )
 GAME( 1983, ambushj, ambush, ambush,   ambush, driver_device,   0, ROT0, "Tecfri (Nippon Amuse license)",     "Ambush (Japan)", GAME_SUPPORTS_SAVE )
 GAME( 1983, ambushv, ambush, ambush,   ambush, driver_device,   0, ROT0, "Tecfri (Volt Electronics license)", "Ambush (Volt Electronics)", GAME_SUPPORTS_SAVE )
diff --git a/src/mame/mame.lst b/src/mame/mame.lst
index 9be45d5ed98..7417538687d 100644
--- a/src/mame/mame.lst
+++ b/src/mame/mame.lst
@@ -8876,6 +8876,7 @@ mrflea          // (c) 1982
 
 // Tecfri games
 ambush          // (c) 1983
+ambushh			// (c) 1983
 ambushj         // (c) 1983 Nippon Amuse license
 ambushv         // (c) 1983 Volt Electronics license
 holeland        // (c) 1984