bin/winapps check return xfreerdp help output

Distro: Arch Linux
OS: Win10 Pro

RDPWindows is running:
```
$ virsh start RDPWindows
error: Domain is already active

$ virsh list
Id Name State
----------------------------
1 RDPWindows running
```

The output:
```
$ bash -x bin/winapps check
+ '[' '!' -f /home/tunamert/.config/winapps/winapps.conf ']'
+++ readlink -f bin/winapps
++ dirname /home/tunamert/git/winapps/bin/winapps
+ DIR=/home/tunamert/git/winapps/bin
++ date
+ RUN='Tue Mar 19 04:21:58 AM +03 2024-13478'
+ '[' '!' -d /home/tunamert/.local/share/winapps ']'
+ RDP_SCALE=100
+ '[' -f /home/tunamert/.config/winapps/winapps.conf ']'
+ . /home/tunamert/.config/winapps/winapps.conf
++ RDP_USER=Tuna
++ RDP_PASS=205046
+ dprint START
+ '[' '' = true ']'
+ '[' -f /home/tunamert/.local/share/winapps/run ']'
++ stat -t -c %Y /home/tunamert/.local/share/winapps/run
+ LAST_RAN=1710809679
+ dprint LAST_RAN:1710809679
+ '[' '' = true ']'
+ touch /home/tunamert/.local/share/winapps/run
++ stat -t -c %Y /home/tunamert/.local/share/winapps/run
+ THIS_RUN=1710811318
+ dprint THIS_RUN:1710811318
+ '[' '' = true ']'
+ (( 1710811318 - 1710809679 < 2 ))
++ which xfreerdp
+ '[' -z /sbin/xfreerdp ']'
+ '[' -z '' ']'
++ groups
++ grep libvirt
+ '[' -z 'libvirt docker kvm wheel tunamert' ']'
++ virsh list
++ grep RDPWindows
+ '[' -z ' 1 RDPWindows running' ']'
++ virsh net-dhcp-leases default
++ grep RDPWindows
++ awk '{print $5}'
+ RDP_IP=192.168.122.112/24
+ RDP_IP=192.168.122.112
+ dprint 1:check
+ '[' '' = true ']'
+ dprint 2:
+ '[' '' = true ']'
+ dprint @:check
+ '[' '' = true ']'
+ MULTI_FLAG=span
+ '[' '' = true ']'
+ '[' check = windows ']'
+ '[' check = check ']'
+ dprint CHECK
+ '[' '' = true ']'
+ xfreerdp /d: /u:Tuna /p:205046 /v:192.168.122.112 +auto-reconnect +clipboard +home-drive -wallpaper /scale:100 /dynamic-resolution /span /app:explorer.exe

FreeRDP - A Free Remote Desktop Protocol Implementation
See www.freerdp.com for more information

Usage: xfreerdp [file] [options] [/v:[:port]]

Syntax:
/flag (enables flag)
/option: (specifies option with value)
+toggle -toggle (enables or disables toggle, where '/' is a synonym of '+')

/a: [,] Addin
/action-script: Action script
+admin Admin (or console) session
+aero Enable desktop composition
/app: program:[|<||alias>],cmd:,file:,guid:,
icon:,name:,workdir:
Remote application program
/args-from: |stdin|fd:|env:
Read command line from a file, stdin or
file descriptor. This argument can not be
combined with any other. Provide one
argument per line.
/assistance: Remote assistance password
+async-channels Enable Asynchronous channels
(experimental)
+async-update Enable Asynchronous update
/audio-mode: Audio output mode
+auth-only Enable Authenticate only
/auth-pkg-list: Authentication package filter
(comma-separated list, use '!' to
exclude)
-authentication Disable Authentication (experimental)
+auto-reconnect Enable Automatic reconnection
/auto-reconnect-max-retries:
Automatic reconnection maximum retries, 0
for unlimited [0,1000]
+auto-request-control Automatically request remote assistance
input control
/bpp: Session bpp (color depth)
+buildconfig Print the build configuration
/cache: [bitmap[:on|off],codec[:rfx|nsc],glyph[:on|off],offscreen[:on|off],
persist,persist-file:]

/cert: [deny,ignore,name:,tofu,fingerprint::[,
fingerprint::]]
Certificate accept options. Use with
care!

* deny ... Automatically abort
connection if the certificate does not
match, no user interaction.

* ignore ... Ignore the
certificate checks altogether (overrules
all other options)

* name ... Use the alternate
instead of the certificate subject
to match locally stored certificates

* tofu ... Accept certificate
unconditionally on first connect and deny
on subsequent connections if the
certificate does not match

* fingerprints ... A list of certificate
hashes that are accepted unconditionally
for a connection
/client-build-number: Client Build Number sent to server
(influences smartcard behaviour, see
[MS-RDPESC])
/client-hostname: Client Hostname to send to server
[-|/]clipboard[: [[use-selection:],[direction-to:[
all|local|remote|off]],[files-to[:all|local|remote|off]]]]
Disable Redirect clipboard:

* use-selection: ... (X11)
Specify which X selection to access.
Default is CLIPBOARD. PRIMARY is the
X-style middle-click selection.

* direction-to:[all|local|remote|off]
control enabled clipboard direction

* files-to:[all|local|remote|off]
control enabled file clipboard directiont
-compression Disable compression
/compression-level: Compression level (0,1,2)
+credentials-delegation Enable credentials delegation
/d: Domain
-decorations Disable Window decorations
+disable-output Deactivate all graphics decoding in the
client session. Useful for load tests
with many simultaneous connections
+disp Display control
/drive: , Redirect directory as named share
. Hotplug support is enabled with
/drive:hotplug,*. This argument provides
the same function as "Drives that I plug
in later" option in MSTSC.
+drives Enable Redirect all mount points as
shares
/dump: , record or replay dump
/dvc: [,] Dynamic virtual channel
+dynamic-resolution Send resolution updates when the window
is resized
+echo Echo channel
-encryption Disable Encryption (experimental)
/encryption-methods: [40,][56,][128,][FIPS]
RDP standard security encryption methods
+f Fullscreen mode (++
toggles fullscreen)
+fipsmode Enable FIPS mode
/floatbar[: sticky:[on|off],default:[visible|hidden],show:[
always|fullscreen|window]]
floatbar is disabled by default (when
enabled defaults to sticky in fullscreen
mode)
-fonts Disable smooth fonts (ClearType)
+force-console-callbacks Enable Use default callbacks (console)
for certificate/credential/...
/frame-ack: Number of frame acknowledgement
/from-stdin[: force] Read credentials from stdin. With
the prompt is done before connection,
otherwise on server request.
/gateway: g:[:],u:,d:,p:,
usage-method:[direct|detect],access-token:,type:[rpc|http[,
no-websockets][,extauth-sspi-ntlm]|auto[,no-websockets][,
extauth-sspi-ntlm]]|arm,url:,
bearer:
Gateway Hostname
/gdi: sw|hw GDI rendering
+geometry Geometry tracking channel
+gestures Enable Consume multitouch input locally
/gfx[: [[progressive[:on|off]|RFX[:on|off]|AVC420[:on|off]AVC444[:on|off]],
mask:,small-cache[:on|off],thin-client[:on|off],progressive[
:on|off]]] RDP8 graphics pipeline
-grab-keyboard Disable Grab keyboard
-grab-mouse Disable Grab mouse
/h: Height
-heartbeat Disable Support heartbeat PDUs
+help Print help
+home-drive Enable Redirect user home as share
+ipv6 Prefer IPv6 AAA record over IPv4 A record
+jpeg JPEG codec support
/jpeg-quality: JPEG quality
/kbd: [layout:[0x|],lang:<0x>,fn-key:,type:,
subtype:,unicode[:on|off],remap:=,
remap:=,pipe:]
Keyboard related options:

* layout: set the keybouard layout
announced to the server

* lang: set the keyboard language
identifier sent to the server

* fn-key: Function key value

* pipe: Name of a named pipe that can be
used to type text into the RDP session


/kerberos: [kdc-url:,lifetime:,start-time:,
renewable-lifetime:,cache:,armor:,
pkinit-anchors:,pkcs11-module:]
Kerberos options
/list: [kbd|kbd-scancode|kbd-lang[:]|smartcard[:[
pkinit-anchors:][,pkcs11-module:]]|monitor|tune]
List available options for subcommand
/load-balance-info: Load balance info
/log-filters: :[,:[,...]]
Set logger filters, see wLog(7) for
details
/log-level: [OFF|FATAL|ERROR|WARN|INFO|DEBUG|TRACE]
Set the default log level, see wLog(7)
for details
/max-fast-path-size: Specify maximum fast-path update size
/max-loop-time: Specify maximum time in milliseconds
spend treating packets
+menu-anims Enable menu animations
/microphone[: [sys:,][dev:,][format:,][rate:,][
channel:]] Audio input (microphone)
/monitors: [,[,...]] Select monitors to use
/mouse: [relative:[on|off],grab:[on|off]]
Mouse related options:

* relative: send relative mouse
movements if supported by server

* grab: grab the mouse if within
the window
-mouse-motion Disable Send mouse motion
+mouse-relative Enable Send mouse motion with relative
addressing
/multimon[: force] Use multiple monitors
+multitouch Enable Redirect multitouch input
-multitransport Disable Support multitransport protocol
-nego Disable protocol security negotiation
/network: [modem|broadband|broadband-low|broadband-high|wan|lan|auto]
Network connection type
+nsc NSCodec support
+old-license Enable Use the old license workflow (no
CAL and hwId set to 0)
/orientation: [0|90|180|270] Orientation of display in degrees
/p: Password
/parallel[: [,]] Redirect parallel device
/parent-window: Parent window id
/pcb: Preconnection Blob
/pcid: Preconnection Id
/pheight: Physical height of display (in
millimeters)
/play-rfx: Replay rfx pcap file
/port: Server port
/prevent-session-lock[: ]
Prevent session locking by injecting fake
mouse motion events to the server when
the connection is idle (default interval:
180 seconds)
+print-reconnect-cookie Enable Print base64 reconnect cookie
after connecting
/printer[: [,]] Redirect printer device
/proxy: [://][:@][:]
Proxy settings: override env. var (see
also environment variable below).
Protocol "socks5" should be given
explicitly where "http" is default.
/pth: Pass the hash (restricted admin mode)
/pwidth: Physical width of display (in
millimeters)
/rdp2tcp:
TCP redirection
/reconnect-cookie: Pass base64 reconnect cookie to the
connection
/redirect-prefer: ,[...]
Override the preferred redirection order
+relax-order-checks Do not check if a RDP order was announced
during capability exchange, only use when
connecting to a buggy server
+restricted-admin Restricted admin mode
+rfx RemoteFX
/rfx-mode: [image|video] RemoteFX mode
/scale: [100|140|180] Scaling factor of the display
/scale-desktop: Scaling factor for desktop applications
(value between 100 and 500)
/scale-device: 100|140|180 Scaling factor for app store applications
/sec: [rdp[:[on|off]]|tls[:[on|off]]|nla[:[on|off]]|ext[:[on|off]]|aad[:[
on|off]]] Force specific protocol security. e.g.
/sec:nla enables NLA and disables all
others, while /sec:nla:[on|off] just
toggles NLA
/serial[: [,[,[,permissive]]]]
Redirect serial device
/server-name: User-specified server name to use for
validation (TLS, Kerberos)
/shell: Alternate shell
/shell-dir: Shell working directory
/size: x or %[wh]
Screen size
/smart-sizing[: x] Scale remote desktop to window size
/smartcard[: [,...]] Redirect the smartcard devices containing
any of the in their names.
/smartcard-logon[: [cert:,key:,pin:,csp:,
reader:,card:]]
Activates Smartcard (optional
certificate) Logon authentication.
/sound[: [sys:,][dev:,][format:,][rate:,][
channel:,][latency:,][quality:]]
Audio output (sound)
+span Span screen over multiple monitors
/spn-class: SPN authentication service class
+ssh-agent SSH Agent forwarding channel
/sspi-module: SSPI shared library module file path
-suppress-output Disable suppress output when minimized
/t: Window title
-themes Disable themes
/timeout: <time in ms> Advanced setting for high latency links:
Adjust connection timeout, use if you
encounter timeout failures with your
connection
/tls: [ciphers|seclevel|secrets-file|enforce]
TLS configuration options: *
ciphers:[netmon|ma|<cipher names>]

* seclevel:<level>, default: 1, range:
[0-5] Override the default TLS security
level, might be required for older target
servers

* secrets-file:<filename>

* enforce[:[ssl3|1.0|1.1|1.2|1.3]] Force
use of SSL/TLS version for a connection.
Some servers have a buggy TLS version
negotiation and might fail without this.
Defaults to TLS 1.2 if no argument is
supplied. Use 1.0 for windows 7
-toggle-fullscreen Disable Alt+Ctrl+Enter to toggle
fullscreen
/tune: <setting:value>,<setting:value>
[experimental] directly manipulate
freerdp settings, use with extreme
caution!
/u: [[<domain>\]<user>|<user>[@<domain>]]
Username
+unmap-buttons Enable Let server see real physical
pointer button
/usb: [dbg,][id:<vid>:<pid>#...,][addr:<bus>:<addr>#...,][auto]
Redirect USB device
/v: <server>[:port] Server hostname
/vc: <channel>[,<options>] Static virtual channel
+version Print version
+video Video optimized remoting channel
/vmconnect[: <vmid>] Hyper-V console (use port 2179, disable
negotiation)
/w: <width> Width
-wallpaper Disable wallpaper
+window-drag Enable full window drag
/window-position: <xpos>x<ypos> window position
/winscard-module: <WinSCard module path>
WinSCard shared library module file path
/wm-class: <class-name> Set the WM_CLASS hint for the window
instance
+workarea Use available work area

Examples:
xfreerdp connection.rdp /p:Pwd123! /f
xfreerdp /u:CONTOSO\JohnDoe /p:Pwd123! /v:rdp.contoso.com
xfreerdp /u:JohnDoe /p:Pwd123! /w:1366 /h:768 /v:192.168.1.100:4489
xfreerdp /u:JohnDoe /p:Pwd123! /vmconnect:C824F53E-95D2-46C6-9A18-23A5BB403532 /v:192.168.1.100
xfreerdp /u:\AzureAD\user@corp.example /p:pwd /v:host

Clipboard Redirection: +clipboard

Drive Redirection: /drive:home,/home/user
Smartcard Redirection: /smartcard:<device>
Smartcard logon with Kerberos authentication: /smartcard-logon /sec:nla
Serial Port Redirection: /serial:<name>,<device>,[SerCx2|SerCx|Serial],[permissive]
Serial Port Redirection: /serial:COM1,/dev/ttyS0
Parallel Port Redirection: /parallel:<name>,<device>
Printer Redirection: /printer:<device>,<driver>,[default]
TCP redirection: /rdp2tcp:/usr/bin/rdp2tcp

Audio Output Redirection: /sound:sys:oss,dev:1,format:1
Audio Output Redirection: /sound:sys:alsa
Audio Input Redirection: /microphone:sys:oss,dev:1,format:1
Audio Input Redirection: /microphone:sys:alsa
```

Reproduce the report with `bash -x bin/winapps check` while the `RDPWindows` domain is running, then inspect the `check` path in `bin/winapps`. Compare the command's behavior with the reported xfreerdp help output; done means the check performs its intended validation instead of returning the help text.

Written by the indexing model from the issue text.