reg query HKLMSystemCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfile /v EnableFirewall

EnableFirewall    REG_DWORD    0x1

query firewall reg value
regex out DWORD value and set to variable var1
if var1 == 0x1 then do blah
else do other blah

for /f "tokens=3" %%x in ('reg query HKLMSystemCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfile /v EnableFirewall') do set FWSTATUS=%%x