Glad to see this worked out for you. BTW I noticed you did the EnableLUA injection before the LocalAccountTokenFilterPolicy injection in your code. interesting it works this way. Have you already become System at that point? Or perhaps this script is just assuming you have already elevated. I guess I missed where the elevation of privs occurred. I thought the localaccount... injection was what bumped you up to NT Authority\System per that exploit I pointed you to.
Either way glad it works. Nice work!