[Sony Tablet S] k4syx:
OK I finally made it (5 hours!)

I couldn't go far with original steps, there was always problem with VpnFaker.apk - although I had removed metadata and used zipsigner2 to sign my copy.

Next step was to try Bin4ry's last script version (v15) - to no avail, as it apparently uses VpnFaker.apk for the US version.

So I've moved back to version v7 modified by WonderEkin, BUT with some manual runme.bat modifications (mostly for my own VpnFaker.apk) and IT WORKED (not like a charm, though).

So my steps were:

1. Full reset to defaults

2. Choose english (US) as default language, configure google account.

3. Switch ON USB debugging, Force Stay On, Fake Location from dev options and Allow unsigned from security

4. Download and install Zipsigner2

5. Sign my own VpnFaker.apk and move it to PC

6. Modify script to use my VpnFaker.apk placed in ./stuff/

7. Modify script to wait a little bit longer (15 pings) when rebooting for terminal window (orignal time was too short, I was getting error type 2 described as "make sure system is running"

8. Run the script a couple of times in cycle (try to root, restore, try to root, restore) - I never got the terminal window thats supposed to be started by "adb shell am start -n com.android.vpndialogs/.Term" but at some point (after second or third loop) I've noticed that the Term.apk that was installed by the script got system (1000) privileges.

9. Then I moved on manually with the original steps, starting from running these two "onload" scripts.

10. Voila, it was rooted (though I had to install busybox myself, something in the "cleaning" part of the script messes things up if there was no terminal window displayed.

So my procedure (try this if your version is not the US one and you have problems) would be like that:

1. Full wipe (includign SDCARD)

2. System language set to English (US)

3. Configure Google account, install Zipsigner2

4. Configure Developer settings (USB debugging, Stay Awake and Fake location on)

5. Configure Security (allow unknown)

6. Create your own VpnFaker.apk as described here: http://xdaforums.com/showpost.php?p=31582941&postcount=42

7. Unpack attachement (my version of v7 script), replace my VpnFaker.apk (Poland) in /stuff/ with your one.

8. Run the script.

9. When there is supposed to be "android updating" message and terminal pop-up - do not fear if you cant see it. Use apps menu to run Android Terminal manually.

10. Check ID - if it is 1000 (system) then break the script running on PC (CTRL+C) and proceed with manual running "onload.sh" and "onload2.sh" as desribed in first post. If your ID is anything else, break the script on PC with CTRL+C, start it again with "5. Roll Back". After succesfull rollback start again from point 8.

Thats basically all, I hope this will help someone with similiar problems.

I've attached my version of the script to this post.

1. Be aware that my VpnFaker.apk (packed in /stuff/) is made for Poland, so as long as you're not from around replace it with your own file.

2. Be aware of the script breaking (CTRL+C) as i have noticed that if you'll let it go till the end when there was no terminal window popping up it will mess the backup directories during cleanup, so you won't be able to do succesfull rollback (I was to lazy to analyze exact cause of the problem, I've just added clear note with capped BREAK HERE).

Many thanks to OP and everyone who contributed to root and thread,

Good luck!