Archer C25 v1 bricked

Howdy everyone! Long time reader here.
I've been using openwrt for a long time, WRD-4300, no issues.
My brother flashed his Archer C25v1 and then tried to revert back stock using the web interface (force flash enabled) and the only stock firmware available from the TP-Link page.
Long story short, when if finished flashing, Power led is on and a brief red light blinks for about one second.
I'm trying to recover it for him using the serial cable and tftp method (tp_recovery.bin, ArcherC25v1_recovery.bin) without any luck!
tftp refuses to 'answer' and the serial cable it results in a "bad checksum" messages.
I've saved the log... if anyone can provide me a firmware or a solution for this problem, i'd be thankfull.
In the end, when you should be able to type commands, it refuses to receive any input.

U-Boot 1.1.4-g039137bb-dirty (Mar 18 2016 - 09:34:23)

ap151 - Dragonfly 1.0

DRAM:  64 MB
Top of RAM usable for U-Boot at: 84000000
Reserving 345k for U-Boot at: 83fa8000
Reserving 16448k for malloc() at: 82f98000
Reserving 44 Bytes for Board Info at: 82f97fd4
Reserving 36 Bytes for Global Data at: 82f97fb0
Reserving 128k for boot params() at: 82f77fb0
Stack Pointer at: 82f77f98
Now running in RAM - U-Boot at: 83fa8000
Flash Manuf Id 0xef, DeviceId0 0x40, DeviceId1 0x17
flash size 8MB, sector count = 128
Flash:  8 MB
Using default environment

In:    serial
Out:   serial
Err:   serial
Net:   ath_gmac_enet_initialize...
No valid address in Flash. Using fixed address
No valid address in Flash. Using fixed address
ath_gmac_enet_initialize: reset mask:c02200
Dragonfly----> S27 PHY *
: cfg1 0x80000000 cfg2 0x7114
eth0: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
ATHRS27: resetting s27
ATHRS27: s27 reset done
: cfg1 0x800c0000 cfg2 0x7214
eth1: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x82
is button pressed? 1
Trying eth0
eth0 link down
FAIL
Trying eth1
eth1 link down
FAIL
Using eth0 device
TFTP from server 192.168.0.66; our IP address is 192.168.0.86
Filename 'ArcherC25v1_recovery.bin'.
Load address: 0x80060000
Loading: Tx Timed out
T Tx Timed out
T Tx Timed out

Retry count exceeded; starting again
Trying eth1
eth1 link down
FAIL
Trying eth0
eth0 link down
FAIL
Using eth1 device
TFTP from server 192.168.0.66; our IP address is 192.168.0.86
Filename 'ArcherC25v1_recovery.bin'.
Load address: 0x80060000
Loading: T T

U-Boot 1.1.4-g039137bb-dirty (Mar 18 2016 - 09:34:23)

ap151 - Dragonfly 1.0

DRAM:  64 MB
Top of RAM usable for U-Boot at: 84000000
Reserving 345k for U-Boot at: 83fa8000
Reserving 16448k for malloc() at: 82f98000
Reserving 44 Bytes for Board Info at: 82f97fd4
Reserving 36 Bytes for Global Data at: 82f97fb0
Reserving 128k for boot params() at: 82f77fb0
Stack Pointer at: 82f77f98
Now running in RAM - U-Boot at: 83fa8000
Flash Manuf Id 0xef, DeviceId0 0x40, DeviceId1 0x17
flash size 8MB, sector count = 128
Flash:  8 MB
Using default environment

In:    serial
Out:   serial
Err:   serial
Net:   ath_gmac_enet_initialize...
No valid address in Flash. Using fixed address
No valid address in Flash. Using fixed address
ath_gmac_enet_initialize: reset mask:c02200
Dragonfly----> S27 PHY *
: cfg1 0x80000000 cfg2 0x7114
eth0: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
ATHRS27: resetting s27
ATHRS27: s27 reset done
: cfg1 0x800c0000 cfg2 0x7214
eth1: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x82
is button pressed? 0
Reading Partition Table from NVRAM ... OK
Parsing Partition Table ... OK
factory boot check integer ok.
load fs uboot at 0x10000.
Hit any key to stop autoboot:  0
## Starting application at 0x80010000 ...


U-Boot 1.1.4 (Jun 21 2016 - 15:57:01)

ap151 - Dragonfly 1.0

DRAM:  64 MB
Top of RAM usable for U-Boot at: 84000000
Reserving 126k for U-Boot at: 83fe0000
Reserving 16448k for malloc() at: 82fd0000
Reserving 44 Bytes for Board Info at: 82fcffd4
Reserving 36 Bytes for Global Data at: 82fcffb0
Reserving 128k for boot params() at: 82faffb0
Stack Pointer at: 82faff98
Now running in RAM - U-Boot at: 83fe0000
Flash Manuf Id 0xef, DeviceId0 0x40, DeviceId1 0x17
flash size 8MB, sector count = 128
Flash:  8 MB
Using default environment

In:    serial
Out:   serial
Err:   serial
Net:   ath_gmac_enet_initialize...
No valid address in Flash. Using fixed address
No valid address in Flash. Using fixed address
ath_gmac_enet_initialize: reset mask:c02200
Dragonfly----> S27 PHY *
: cfg1 0x80000000 cfg2 0x7114
eth0: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
ATHRS27: resetting s27
ATHRS27: s27 reset done
: cfg1 0x800c0000 cfg2 0x7214
eth1: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x82
Hit any key to stop autoboot:  0
[uboot info] link down PHY
## Booting image at 9f030000 ...
Bad Magic Number
ath>

Bump! Help?