SYSRET vuln port for Windows by @ponez works really well with Meterpreter: