1.  connect phone to pc via usb activesync

2.  copy haret-0.4.8.exe to device

3.  run netstat on pc to find the IP of the activesync connection mine was: 
    169.254.2.1   
    (ipconfig /all shows mobile device as 169.254.2.2 that is PC side)

4.  start haret on phone and click "Listen for network connection"

5.  telnet to <device IP> port 9999
    ex: telnet 169.254.2.1 9999

6.  After connection is made run the following command to dump bootloader:
    pwf spldump.bin 0 0x40000

you can also use help to show what other commands are available


This will create a file named spldump.bin in the folder on your PPC where you ran haret from