Aktivierung des Root-Accounts

$>RunMe.bat

======================================================================
= This script will root your Android phone with adb restore function =
= Script by Bin4ry (thanks to Goroh_kun and tkymgr for the idea)     =
=             Idea for Tablet S from Fi01_IS01                       =
=                      (19.09.2012) v9                               =
======================================================================

Device type:
1) Normal
2) Special (for example: Sony Tablet S, Medion Lifetab)
x) Unroot

Make a choice: 1


Checking if i should run in Normal Mode or special Sony Mode
Please connect your device with USB-Debugging enabled now


$>stuff\adb.exe wait-for-device
* daemon not running. starting it now on port 5037 *
* daemon started successfully *

$>stuff\adb.exe pull /system/app/Backup-Restore.apk  1>NUL
438 KB/s (147059 bytes in 0.327s)

$>if EXIST Backup-Restore.apk GOTO XPS


Found Sony Backup-Restore.apk
LT26,LT22 etc. mode enabled!


$>del Backup-Restore.apk

$>stuff\adb.exe wait-for-device


Pushing busybox....

$>stuff\adb.exe push stuff/busybox /data/local/tmp/.
561 KB/s (1085140 bytes in 1.887s)


Pushing su binary ....

$>stuff\adb.exe push stuff/su /data/local/tmp/.
466 KB/s (22364 bytes in 0.046s)


Pushing Superuser app

$>stuff\adb.exe push stuff/Superuser.apk /data/local/tmp/.
567 KB/s (843503 bytes in 1.450s)


Making busybox runable ...

$>stuff\adb.exe shell chmod 755 /data/local/tmp/busybox


Pushing fake Backup

$>stuff\adb.exe push stuff\RootMe.tar /data/local/tmp/RootMe.tar
576 KB/s (73728 bytes in 0.124s)

$>stuff\adb.exe shell "mkdir /mnt/sdcard/.semc-fullbackup > /dev/null 2>&1"


Extracting fakebackup on device ...

$>stuff\adb.exe shell "cd /mnt/sdcard/.semc-fullbackup/; /data/local/tmp/busybox
tar xf /data/local/tmp/RootMe.tar"


Watch now your device. Select the backup named RootMe and restore it!

$>stuff\adb.exe shell "am start com.sonyericsson.vendor.backuprestore/.ui.BackupA
ctivity"
Starting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.L
AUNCHER] cmp=com.sonyericsson.vendor.backuprestore/.ui.BackupActivity }


If all is successful i will tell you, if not this shell will run forever.
Running ......

$>stuff\adb.exe shell "while ! ln -s /data/local.prop /data/data/com.android.sett
ings/a/file99; do :; done"  1>NUL


Good, it worked! Now we are rebooting soon, please be patient!


$>stuff\adb.exe shell "rm -r /mnt/sdcard/.semc-fullbackup/RootMe"

$>stuff\adb.exe reboot

$>ping -n 10 127.0.0.1  1>NUL


Waiting for device to come up again....

$>stuff\adb.exe wait-for-device


Going to copy files to it's place

$>stuff\adb.exe shell "/data/local/tmp/busybox mount -o remount,rw /system && /da
ta/local/tmp/busybox mv /data/local/tmp/su /system/xbin/su && /data/local/tmp/bu
sybox mv /data/local/tmp/Superuser.apk /system/app/Superuser.apk && /data/local/
tmp/busybox cp /data/local/tmp/busybox /system/xbin/busybox && chown 0.0 /system
/xbin/su && chmod 06755 /system/xbin/su && chmod 655 /system/app/Superuser.apk &
& chmod 755 /system/xbin/busybox && rm /data/local.prop && reboot"


You can close all open command-prompts now!
After reboot all is done! Have fun!

Bin4ry