Pass 0 skeleton. The project builds and verifies byte-identical to the original ROM, but no disassembly exists yet: prg.s is a single .incbin "prg.bin" of the PRG image.

make assembles header.s, prg.s, links them with ld65 and compares the result against rom.nes:

Byte-identical ROM verified.

ROM

Property	Value
Format	iNES
Mapper	2
Board	UNROM
Mirroring	Vertical
Four-screen VRAM	no
Battery	no
PRG	128 KB (8 x 16 KB), at file offset $0010
CHR	none
Trainer	none
Footer	none
NMI vector	$DE0D
RESET vector	$1880
IRQ vector	$3CA2
ROM file	`Trojan (U) [a1].nes`
SHA-256	`d9146b7782ee031c53ad8209c4a428ce1f09e0641d29fceb5120a8db15a364e6`

Header notes

none

Open work

Pass 1 - run nesdis.py over prg.bin to produce the code/data split. The tracer reads the vectors from the last six bytes of the PRG image, so the split seeds correctly.
Pass 1 must emit the canonical audit comment ; CPU:$C123 PRG:0123 AD 21 03 at column 35 for every instruction.
Pass 2 - replace the address-derived Label_XXXX names and the raw $XXXX call operands.
Pass 3 - semantic zero-page aliases (applied only at the sites where their role is proven) and named data tables.
Promotion to NROM/<name>/ once Pass 3 is done, as git mv.

Files

File	Purpose
`prg.s`	Pass 0 PRG include (replaced by the Pass 1 disassembly)
`header.s`	iNES header include
`prg.bin`	131072 bytes (128 KB) PRG image
`rom.nes`	byte-identical copy of the original ROM
`linker.cfg`	HEADER / PRG memory areas
`symbols.inc`	NES hardware register names
`locals.inc`	zero-page aliases (empty at Pass 0)
`Makefile`	build and byte-identity check