what you need to do is use the game to boot into RCM. Essentially on that game you can fire off a browser, and by hijacking the DNS that the switch uses you can direct the switch to a webserver (Pegaswitch) and also via the same exploit run reboottorcm, then you can use RCM to boot unrestricted...