Since you know how to dump roms, and you look very determined in solving this issue, you might find the following useful:
1) The datasheet of the GAL16V8 is
here. Now that GAL has internal latches which make it impossible to dump, but if it has been dumped for MAME then chances are the register inside the GAL is actually not used. Therefore you can build yourself an adapter which patches all input pins to address lines and all output pins to data lines. Once this is done, you can dump it like a normal EPROM. Your programmer will generate on the address lines all the possible input combinations and will read the outputs on the data bus. The challenge will actually be that of finding out which I/O pins of the GAL are configured as input and which as output. But for this, using the scope, you can just pull the GAL off the circuit and check which traces going to I/O pins are floating.
Then again, since GAL16V8 devices are still easy enough to find, you might want to just use the dump you found, program yourself one with your Wellon and be done with it.
2) With regard to the ROMs you might want to first isolate the program ROMs from the rest (which should be easy, due to the amount of information provided by MAME) and then check that each and every address line, data line and control line is doing what it should do (change state), which means it is properly connected.
3) I am not a CPS1 expert, therefore I'm not sure to what extent can the C board affect the boot process, but I do know that C boards contain the DRM of the game. You might want to check if its battery is dead (provided it has one) and maybe try and swap it out with another identical one just to rule it out. AFAIK, when the C board is dead you should get a black screen (that is no boot tests).
If anything fails you can still try and replace the few TTL ics on the B board one by one.