stlink_upload.bat is broken; the bootloader image requires a base address. Since it's omitted, st-link_cli.exe uses base address 0, which is wrong.

Evidently I skipped testing on Windows altogether.