[CmdletBinding()]
param()

$ErrorActionPreference = "Stop"

Add-Type -AssemblyName System.Windows.Forms
Add-Type -AssemblyName System.Drawing

$script:RootPath = Split-Path -Parent (Split-Path -Parent $MyInvocation.MyCommand.Path)
$script:RootCertificatePath = Join-Path $script:RootPath "assets\certificates\MrSphay-LocalTrust-Root.cer"
$script:PublisherCertificatePath = Join-Path $script:RootPath "assets\certificates\MrSphay-CodeSigning.cer"
$script:IconPath = Join-Path $script:RootPath "assets\MrTrust.ico"
$script:SelectedFilePath = $null
$script:CurrentAccent = 0

$colors = @{
    Background = [Drawing.Color]::FromArgb(18, 23, 26)
    Panel = [Drawing.Color]::FromArgb(27, 33, 36)
    PanelAlt = [Drawing.Color]::FromArgb(35, 43, 47)
    Border = [Drawing.Color]::FromArgb(61, 73, 79)
    Text = [Drawing.Color]::FromArgb(234, 239, 236)
    Muted = [Drawing.Color]::FromArgb(165, 180, 172)
    Green = [Drawing.Color]::FromArgb(28, 185, 111)
    GreenHover = [Drawing.Color]::FromArgb(38, 205, 130)
    Orange = [Drawing.Color]::FromArgb(242, 153, 74)
    Red = [Drawing.Color]::FromArgb(235, 87, 87)
}

function Test-IsAdministrator {
    $identity = [Security.Principal.WindowsIdentity]::GetCurrent()
    $principal = [Security.Principal.WindowsPrincipal]::new($identity)
    $principal.IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)
}

function Get-MrTrustCertificate {
    param([Parameter(Mandatory)][string]$Path)

    if (-not (Test-Path -LiteralPath $Path)) {
        throw "Certificate file not found: $Path"
    }

    [System.Security.Cryptography.X509Certificates.X509Certificate2]::new($Path)
}

function Get-TrustScope {
    if ($script:AllUsersCheckBox.Checked) { "LocalMachine" } else { "CurrentUser" }
}

function Get-StorePath {
    param(
        [Parameter(Mandatory)][string]$Scope,
        [Parameter(Mandatory)][string]$Store
    )

    "Cert:\$Scope\$Store"
}

function Test-CertificateInstalled {
    param(
        [Parameter(Mandatory)]$Certificate,
        [Parameter(Mandatory)][string]$Scope,
        [Parameter(Mandatory)][string]$Store
    )

    $storePath = Get-StorePath -Scope $Scope -Store $Store
    @(Get-ChildItem -Path $storePath | Where-Object Thumbprint -eq $Certificate.Thumbprint).Count -gt 0
}

function Set-Busy {
    param([bool]$Busy)

    $script:ProgressBar.Visible = $Busy
    if ($Busy) {
        $script:ProgressBar.Style = "Marquee"
    }
}

function Set-StatusText {
    param(
        [Parameter(Mandatory)][string]$Text,
        [Parameter(Mandatory)][Drawing.Color]$Color
    )

    $script:StatusLabel.Text = $Text
    $script:StatusPill.BackColor = $Color
}

function Add-AnimatedButton {
    param(
        [Parameter(Mandatory)][Windows.Forms.Button]$Button,
        [Parameter(Mandatory)][Drawing.Color]$Normal,
        [Parameter(Mandatory)][Drawing.Color]$Hover
    )

    $Button.FlatStyle = "Flat"
    $Button.FlatAppearance.BorderColor = $colors.Border
    $Button.FlatAppearance.BorderSize = 1
    $Button.BackColor = $Normal
    $Button.ForeColor = $colors.Text
    $Button.Cursor = [Windows.Forms.Cursors]::Hand
    $Button.Add_MouseEnter({ param($sender, $eventArgs) $sender.BackColor = $Hover })
    $Button.Add_MouseLeave({ param($sender, $eventArgs) $sender.BackColor = $Normal })
    $Button.Add_MouseDown({ param($sender, $eventArgs) $sender.Location = [Drawing.Point]::new($sender.Location.X, $sender.Location.Y + 1) })
    $Button.Add_MouseUp({ param($sender, $eventArgs) $sender.Location = [Drawing.Point]::new($sender.Location.X, $sender.Location.Y - 1) })
}

function New-Label {
    param(
        [string]$Text,
        [int]$X,
        [int]$Y,
        [int]$Width = 220,
        [int]$Height = 24,
        [Drawing.Color]$Color = $colors.Muted,
        [Drawing.Font]$Font = $null
    )

    $label = [Windows.Forms.Label]::new()
    $label.Text = $Text
    $label.Location = [Drawing.Point]::new($X, $Y)
    $label.Size = [Drawing.Size]::new($Width, $Height)
    $label.ForeColor = $Color
    if ($Font) { $label.Font = $Font }
    $label
}

function Update-TrustStatus {
    try {
        Set-Busy $true
        $rootCertificate = Get-MrTrustCertificate -Path $script:RootCertificatePath
        $publisherCertificate = Get-MrTrustCertificate -Path $script:PublisherCertificatePath
        $scope = Get-TrustScope

        $rootInstalled = Test-CertificateInstalled -Certificate $rootCertificate -Scope $scope -Store "Root"
        $publisherInstalled = Test-CertificateInstalled -Certificate $publisherCertificate -Scope $scope -Store "TrustedPublisher"

        $script:RootThumbprintLabel.Text = $rootCertificate.Thumbprint
        $script:PublisherThumbprintLabel.Text = $publisherCertificate.Thumbprint
        $script:ExpiryLabel.Text = $rootCertificate.NotAfter.ToString("yyyy-MM-dd")
        $script:ScopeValueLabel.Text = $scope

        if ($rootInstalled -and $publisherInstalled) {
            Set-StatusText -Text "Trusted" -Color $colors.Green
            $script:TrustSummaryLabel.Text = "MrSphay public trust is installed for $scope."
        }
        else {
            Set-StatusText -Text "Not installed" -Color $colors.Orange
            $script:TrustSummaryLabel.Text = "Trust is not fully installed for $scope."
        }
    }
    catch {
        Set-StatusText -Text "Error" -Color $colors.Red
        $script:TrustSummaryLabel.Text = $_.Exception.Message
    }
    finally {
        Set-Busy $false
    }
}

function Install-MrTrustCertificates {
    $scope = Get-TrustScope
    if ($scope -eq "LocalMachine" -and -not (Test-IsAdministrator)) {
        [Windows.Forms.MessageBox]::Show("All-users trust requires running MrTrust as Administrator.", "MrTrust", "OK", "Warning") | Out-Null
        return
    }

    $rootCertificate = Get-MrTrustCertificate -Path $script:RootCertificatePath
    $publisherCertificate = Get-MrTrustCertificate -Path $script:PublisherCertificatePath
    $message = "Install MrSphay trust for $scope?`r`n`r`nRoot:`r`n$($rootCertificate.Thumbprint)`r`n`r`nPublisher:`r`n$($publisherCertificate.Thumbprint)`r`n`r`nThis does not disable Defender or SmartScreen."
    $result = [Windows.Forms.MessageBox]::Show($message, "Install MrTrust", "YesNo", "Warning")
    if ($result -ne [Windows.Forms.DialogResult]::Yes) { return }

    Set-Busy $true
    Import-Certificate -FilePath $script:RootCertificatePath -CertStoreLocation (Get-StorePath -Scope $scope -Store "Root") | Out-Null
    Import-Certificate -FilePath $script:PublisherCertificatePath -CertStoreLocation (Get-StorePath -Scope $scope -Store "TrustedPublisher") | Out-Null
    Update-TrustStatus
}

function Remove-MrTrustCertificates {
    $scope = Get-TrustScope
    if ($scope -eq "LocalMachine" -and -not (Test-IsAdministrator)) {
        [Windows.Forms.MessageBox]::Show("All-users removal requires running MrTrust as Administrator.", "MrTrust", "OK", "Warning") | Out-Null
        return
    }

    $result = [Windows.Forms.MessageBox]::Show("Remove MrSphay trust for $scope?", "Remove MrTrust", "YesNo", "Question")
    if ($result -ne [Windows.Forms.DialogResult]::Yes) { return }

    Set-Busy $true
    $rootCertificate = Get-MrTrustCertificate -Path $script:RootCertificatePath
    $publisherCertificate = Get-MrTrustCertificate -Path $script:PublisherCertificatePath
    $targets = @(
        [pscustomobject]@{ Store = "Root"; Thumbprint = $rootCertificate.Thumbprint },
        [pscustomobject]@{ Store = "TrustedPublisher"; Thumbprint = $publisherCertificate.Thumbprint }
    )

    foreach ($target in $targets) {
        $storePath = Get-StorePath -Scope $scope -Store $target.Store
        Get-ChildItem -Path $storePath |
            Where-Object Thumbprint -eq $target.Thumbprint |
            Remove-Item
    }

    Update-TrustStatus
}

function Test-MarkOfTheWeb {
    param([Parameter(Mandatory)][string]$Path)

    try {
        $stream = Get-Content -LiteralPath $Path -Stream Zone.Identifier -ErrorAction Stop
        ($stream -join "`n") -match "ZoneId\s*=\s*[3-4]"
    }
    catch {
        $false
    }
}

function Get-SmartScreenExplanation {
    param(
        [bool]$SignedByMrSphay,
        [bool]$HasMotw
    )

    if ($SignedByMrSphay -and $HasMotw) {
        "Publisher trust can be valid while SmartScreen still warns because the downloaded file has Internet origin and low Microsoft reputation."
    }
    elseif ($SignedByMrSphay) {
        "The publisher matches MrSphay. SmartScreen may still warn until Microsoft reputation builds for this exact app and publisher."
    }
    elseif ($HasMotw) {
        "This file came from the Internet and is not signed by MrSphay. SmartScreen warnings are expected."
    }
    else {
        "MrTrust can only help with MrSphay-signed files. SmartScreen reputation is separate from local certificate trust."
    }
}

function Test-SelectedFile {
    param([Parameter(Mandatory)][string]$Path)

    Set-Busy $true
    try {
        if (-not (Test-Path -LiteralPath $Path -PathType Leaf)) {
            throw "File not found: $Path"
        }

        $signature = Get-AuthenticodeSignature -LiteralPath $Path
        $hasMotw = Test-MarkOfTheWeb -Path $Path
        $signer = $signature.SignerCertificate
        $signedByMrSphay = $false
        if ($signer) {
            $signedByMrSphay = $signer.Thumbprint -eq "A024A89200469F099EC4A172B4F96F6428AFD41B" -or $signer.Subject -like "*MrSphay*"
        }

        $script:FileNameLabel.Text = [IO.Path]::GetFileName($Path)
        $script:FilePathLabel.Text = $Path
        $script:SignatureStatusLabel.Text = "$($signature.Status)"
        $script:SignerLabel.Text = if ($signer) { $signer.Subject } else { "No signer certificate" }
        $script:MrSphayMatchLabel.Text = if ($signedByMrSphay) { "Yes" } else { "No" }
        $script:MotwLabel.Text = if ($hasMotw) { "Yes" } else { "No" }
        $script:SmartScreenLabel.Text = Get-SmartScreenExplanation -SignedByMrSphay $signedByMrSphay -HasMotw $hasMotw

        if ($signedByMrSphay -and $signature.Status -eq "Valid") {
            $script:FileVerdictLabel.Text = "Looks good: signed by MrSphay and locally valid."
            $script:FileVerdictLabel.ForeColor = $colors.Green
        }
        elseif ($signedByMrSphay) {
            $script:FileVerdictLabel.Text = "Signed by MrSphay, but local validation is not fully valid: $($signature.Status)"
            $script:FileVerdictLabel.ForeColor = $colors.Orange
        }
        else {
            $script:FileVerdictLabel.Text = "Not a MrSphay-signed file."
            $script:FileVerdictLabel.ForeColor = $colors.Red
        }
    }
    catch {
        $script:FileVerdictLabel.Text = $_.Exception.Message
        $script:FileVerdictLabel.ForeColor = $colors.Red
    }
    finally {
        Set-Busy $false
    }
}

[Windows.Forms.Application]::EnableVisualStyles()

$form = [Windows.Forms.Form]::new()
$form.Text = "MrTrust"
$form.StartPosition = "CenterScreen"
$form.ClientSize = [Drawing.Size]::new(980, 660)
$form.MinimumSize = [Drawing.Size]::new(920, 620)
$form.BackColor = $colors.Background
$form.Font = [Drawing.Font]::new("Segoe UI", 10)
if (Test-Path -LiteralPath $script:IconPath) {
    $form.Icon = [Drawing.Icon]::new($script:IconPath)
}

$header = [Windows.Forms.Panel]::new()
$header.Dock = "Top"
$header.Height = 126
$header.BackColor = $colors.Panel
$form.Controls.Add($header)

$accent = [Windows.Forms.Panel]::new()
$accent.Dock = "Left"
$accent.Width = 8
$accent.BackColor = $colors.Green
$header.Controls.Add($accent)

$logoBox = [Windows.Forms.PictureBox]::new()
$logoBox.Size = [Drawing.Size]::new(46, 46)
$logoBox.Location = [Drawing.Point]::new(34, 30)
$logoBox.SizeMode = "StretchImage"
if (Test-Path -LiteralPath $script:IconPath) {
    $logoBox.Image = [Drawing.Icon]::new($script:IconPath).ToBitmap()
}
$header.Controls.Add($logoBox)

$title = New-Label -Text "MrTrust" -X 96 -Y 22 -Width 260 -Height 48 -Color $colors.Text -Font ([Drawing.Font]::new("Segoe UI", 25, [Drawing.FontStyle]::Bold))
$header.Controls.Add($title)

$subtitle = New-Label -Text "Trust diagnostics for MrSphay signed Windows apps" -X 100 -Y 76 -Width 520 -Height 24 -Color $colors.Muted
$header.Controls.Add($subtitle)

$statusText = New-Label -Text "Status" -X 720 -Y 31 -Width 180 -Height 22
$header.Controls.Add($statusText)

$script:StatusPill = [Windows.Forms.Panel]::new()
$script:StatusPill.Size = [Drawing.Size]::new(16, 16)
$script:StatusPill.Location = [Drawing.Point]::new(720, 63)
$script:StatusPill.BackColor = $colors.Orange
$header.Controls.Add($script:StatusPill)

$script:StatusLabel = New-Label -Text "Checking..." -X 748 -Y 58 -Width 190 -Height 28 -Color $colors.Text
$script:StatusLabel.AutoEllipsis = $true
$header.Controls.Add($script:StatusLabel)

$script:ProgressBar = [Windows.Forms.ProgressBar]::new()
$script:ProgressBar.Location = [Drawing.Point]::new(100, 108)
$script:ProgressBar.Size = [Drawing.Size]::new(820, 5)
$script:ProgressBar.Visible = $false
$header.Controls.Add($script:ProgressBar)

$tabControl = [Windows.Forms.TabControl]::new()
$tabControl.Dock = "Fill"
$tabControl.Appearance = "Normal"
$tabControl.BackColor = $colors.Background
$tabControl.ForeColor = $colors.Text
$form.Controls.Add($tabControl)

$trustTab = [Windows.Forms.TabPage]::new()
$trustTab.Text = "Trust"
$trustTab.BackColor = $colors.Background
$tabControl.TabPages.Add($trustTab)

$diagnosticsTab = [Windows.Forms.TabPage]::new()
$diagnosticsTab.Text = "Diagnostics"
$diagnosticsTab.BackColor = $colors.Background
$tabControl.TabPages.Add($diagnosticsTab)

$helpTab = [Windows.Forms.TabPage]::new()
$helpTab.Text = "SmartScreen"
$helpTab.BackColor = $colors.Background
$tabControl.TabPages.Add($helpTab)

$trustPanel = [Windows.Forms.Panel]::new()
$trustPanel.BackColor = $colors.Panel
$trustPanel.Size = [Drawing.Size]::new(880, 245)
$trustPanel.Location = [Drawing.Point]::new(36, 34)
$trustTab.Controls.Add($trustPanel)

$scopeLabel = New-Label -Text "Scope" -X 26 -Y 24
$trustPanel.Controls.Add($scopeLabel)

$script:AllUsersCheckBox = [Windows.Forms.CheckBox]::new()
$script:AllUsersCheckBox.Text = "Install for all users (requires Administrator)"
$script:AllUsersCheckBox.ForeColor = $colors.Text
$script:AllUsersCheckBox.Location = [Drawing.Point]::new(26, 50)
$script:AllUsersCheckBox.AutoSize = $true
$script:AllUsersCheckBox.FlatStyle = "Flat"
$script:AllUsersCheckBox.Add_CheckedChanged({ Update-TrustStatus })
$trustPanel.Controls.Add($script:AllUsersCheckBox)

$trustPanel.Controls.Add((New-Label -Text "Root thumbprint" -X 26 -Y 92))
$script:RootThumbprintLabel = New-Label -Text "-" -X 205 -Y 92 -Width 580 -Height 24 -Color $colors.Text -Font ([Drawing.Font]::new("Consolas", 9))
$trustPanel.Controls.Add($script:RootThumbprintLabel)

$trustPanel.Controls.Add((New-Label -Text "Publisher thumbprint" -X 26 -Y 126))
$script:PublisherThumbprintLabel = New-Label -Text "-" -X 205 -Y 126 -Width 580 -Height 24 -Color $colors.Text -Font ([Drawing.Font]::new("Consolas", 9))
$trustPanel.Controls.Add($script:PublisherThumbprintLabel)

$trustPanel.Controls.Add((New-Label -Text "Expires" -X 26 -Y 160))
$script:ExpiryLabel = New-Label -Text "-" -X 205 -Y 160 -Width 200 -Height 24 -Color $colors.Text
$trustPanel.Controls.Add($script:ExpiryLabel)

$trustPanel.Controls.Add((New-Label -Text "Active scope" -X 26 -Y 194))
$script:ScopeValueLabel = New-Label -Text "-" -X 205 -Y 194 -Width 200 -Height 24 -Color $colors.Text
$trustPanel.Controls.Add($script:ScopeValueLabel)

$script:TrustSummaryLabel = New-Label -Text "Checking trust state..." -X 36 -Y 306 -Width 860 -Height 42 -Color $colors.Muted
$trustTab.Controls.Add($script:TrustSummaryLabel)

$installButton = [Windows.Forms.Button]::new()
$installButton.Text = "Install trust"
$installButton.Size = [Drawing.Size]::new(180, 48)
$installButton.Location = [Drawing.Point]::new(36, 372)
Add-AnimatedButton -Button $installButton -Normal $colors.Green -Hover $colors.GreenHover
$installButton.Add_Click({ Install-MrTrustCertificates })
$trustTab.Controls.Add($installButton)

$removeButton = [Windows.Forms.Button]::new()
$removeButton.Text = "Remove trust"
$removeButton.Size = [Drawing.Size]::new(180, 48)
$removeButton.Location = [Drawing.Point]::new(238, 372)
Add-AnimatedButton -Button $removeButton -Normal $colors.PanelAlt -Hover $colors.Border
$removeButton.Add_Click({ Remove-MrTrustCertificates })
$trustTab.Controls.Add($removeButton)

$refreshButton = [Windows.Forms.Button]::new()
$refreshButton.Text = "Refresh"
$refreshButton.Size = [Drawing.Size]::new(140, 48)
$refreshButton.Location = [Drawing.Point]::new(440, 372)
Add-AnimatedButton -Button $refreshButton -Normal $colors.PanelAlt -Hover $colors.Border
$refreshButton.Add_Click({ Update-TrustStatus })
$trustTab.Controls.Add($refreshButton)

$note = New-Label -Text "MrTrust installs public certificates only. It does not disable Defender, SmartScreen, UAC, or enterprise policies." -X 36 -Y 456 -Width 880 -Height 46 -Color $colors.Muted
$trustTab.Controls.Add($note)

$filePanel = [Windows.Forms.Panel]::new()
$filePanel.BackColor = $colors.Panel
$filePanel.Size = [Drawing.Size]::new(880, 420)
$filePanel.Location = [Drawing.Point]::new(36, 34)
$diagnosticsTab.Controls.Add($filePanel)

$chooseButton = [Windows.Forms.Button]::new()
$chooseButton.Text = "Choose .exe or .msi"
$chooseButton.Size = [Drawing.Size]::new(190, 44)
$chooseButton.Location = [Drawing.Point]::new(24, 24)
Add-AnimatedButton -Button $chooseButton -Normal $colors.Green -Hover $colors.GreenHover
$filePanel.Controls.Add($chooseButton)

$scanButton = [Windows.Forms.Button]::new()
$scanButton.Text = "Scan file"
$scanButton.Size = [Drawing.Size]::new(130, 44)
$scanButton.Location = [Drawing.Point]::new(232, 24)
Add-AnimatedButton -Button $scanButton -Normal $colors.PanelAlt -Hover $colors.Border
$filePanel.Controls.Add($scanButton)

$script:FileVerdictLabel = New-Label -Text "Choose a Windows installer or executable to inspect." -X 24 -Y 88 -Width 820 -Height 30 -Color $colors.Muted -Font ([Drawing.Font]::new("Segoe UI", 11, [Drawing.FontStyle]::Bold))
$filePanel.Controls.Add($script:FileVerdictLabel)

$filePanel.Controls.Add((New-Label -Text "File" -X 24 -Y 136))
$script:FileNameLabel = New-Label -Text "-" -X 210 -Y 136 -Width 620 -Height 24 -Color $colors.Text
$filePanel.Controls.Add($script:FileNameLabel)

$filePanel.Controls.Add((New-Label -Text "Path" -X 24 -Y 170))
$script:FilePathLabel = New-Label -Text "-" -X 210 -Y 170 -Width 620 -Height 40 -Color $colors.Text
$script:FilePathLabel.AutoEllipsis = $true
$filePanel.Controls.Add($script:FilePathLabel)

$filePanel.Controls.Add((New-Label -Text "Signature status" -X 24 -Y 222))
$script:SignatureStatusLabel = New-Label -Text "-" -X 210 -Y 222 -Width 620 -Height 24 -Color $colors.Text
$filePanel.Controls.Add($script:SignatureStatusLabel)

$filePanel.Controls.Add((New-Label -Text "Signer" -X 24 -Y 256))
$script:SignerLabel = New-Label -Text "-" -X 210 -Y 256 -Width 620 -Height 36 -Color $colors.Text
$script:SignerLabel.AutoEllipsis = $true
$filePanel.Controls.Add($script:SignerLabel)

$filePanel.Controls.Add((New-Label -Text "MrSphay match" -X 24 -Y 306))
$script:MrSphayMatchLabel = New-Label -Text "-" -X 210 -Y 306 -Width 180 -Height 24 -Color $colors.Text
$filePanel.Controls.Add($script:MrSphayMatchLabel)

$filePanel.Controls.Add((New-Label -Text "Mark-of-the-Web" -X 24 -Y 340))
$script:MotwLabel = New-Label -Text "-" -X 210 -Y 340 -Width 180 -Height 24 -Color $colors.Text
$filePanel.Controls.Add($script:MotwLabel)

$filePanel.Controls.Add((New-Label -Text "SmartScreen note" -X 24 -Y 374))
$script:SmartScreenLabel = New-Label -Text "-" -X 210 -Y 374 -Width 620 -Height 40 -Color $colors.Muted
$filePanel.Controls.Add($script:SmartScreenLabel)

$chooseButton.Add_Click({
    $dialog = [Windows.Forms.OpenFileDialog]::new()
    $dialog.Filter = "Windows apps and installers (*.exe;*.msi;*.dll;*.cat)|*.exe;*.msi;*.dll;*.cat|All files (*.*)|*.*"
    if ($dialog.ShowDialog() -eq [Windows.Forms.DialogResult]::OK) {
        $script:SelectedFilePath = $dialog.FileName
        Test-SelectedFile -Path $script:SelectedFilePath
    }
})
$scanButton.Add_Click({
    if ($script:SelectedFilePath) {
        Test-SelectedFile -Path $script:SelectedFilePath
    }
})

$helpPanel = [Windows.Forms.Panel]::new()
$helpPanel.BackColor = $colors.Panel
$helpPanel.Size = [Drawing.Size]::new(880, 420)
$helpPanel.Location = [Drawing.Point]::new(36, 34)
$helpTab.Controls.Add($helpPanel)

$helpTitle = New-Label -Text "Why SmartScreen can still appear" -X 24 -Y 24 -Width 780 -Height 34 -Color $colors.Text -Font ([Drawing.Font]::new("Segoe UI", 14, [Drawing.FontStyle]::Bold))
$helpPanel.Controls.Add($helpTitle)

$helpText = @"
MrTrust handles local certificate trust. SmartScreen also uses Microsoft reputation.

If Windows shows "Publisher: MrSphay Code Signing", the signature identity is being recognized.

A red SmartScreen dialog can still appear when a file is new, downloaded from the Internet, rarely seen, or has not built enough Microsoft reputation yet.

MrTrust will not disable SmartScreen. It can show whether a file is signed, whether it matches MrSphay, and whether Mark-of-the-Web is present.
"@
$helpBody = New-Label -Text $helpText -X 24 -Y 78 -Width 820 -Height 250 -Color $colors.Muted
$helpPanel.Controls.Add($helpBody)

$pulseTimer = [Windows.Forms.Timer]::new()
$pulseTimer.Interval = 80
$pulseTimer.Add_Tick({
    $script:CurrentAccent = ($script:CurrentAccent + 1) % 40
    $value = 150 + [Math]::Abs(20 - $script:CurrentAccent) * 3
    $accent.BackColor = [Drawing.Color]::FromArgb(28, [Math]::Min(220, $value), 111)
})
$pulseTimer.Start()

$form.Add_Shown({ Update-TrustStatus })
[Windows.Forms.Application]::Run($form)