@n3wb1en3w9999 said:
I have found Remi’s friend and have found the command to get the %userprofile%. However I cannot seem to “write” to any directory such as temp, etc. Any clues as to how to enumerate a directory I can write too ?
Lol, you have the new friend 
Now you should have the power to create your folder with the right command and drop your cat.