Thanks for your answer.

I compared your SETool patch with the one I used and noticed they are different. So I tried using SETool with your patch but it still failed to update the phone to CID52.

Here is the log from SETool:
(I named your patch *.gdfs but used the option "write script")

Welcome to SEtool2 ( LITE edition ) v 1.11
supported DB2010/DB2012 CID49/50/51/52, DB2020 CID49/51/52
Loaded 51 flash descriptors

if you like LITE edition - please visit Index of ./ and buy FULL.

ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:51
Speed:921600
Flash ID check:2019
Flash props sent ok
OTP LOCKED:1 CID:51 PAF:1 IMEI:35159602****** CERT:RED
FLASH CID:51 COLOR:RED

Model:W880i
Brand:TMN
MAPP CXC article: R1JC002 prgCXC1250640_GENERIC_AI
MAPP CXC version: R1JC002
Language Package:EUROPE_1
CDA article: CDA102719/12
CDA version: R2A
Default article: cxc1250651
Default version: R1JC002

Network LOCKED
Operator: 268-06

Elapsed:5 secs.
ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:51
Speed:921600
OTP LOCKED:1 CID:51 PAF:1 IMEI:35159602****** CERT:RED
FLASH CID:51 COLOR:RED
LDR:061201 1314 HANCXC1329129_DB2020_FLASHLOADER_R2A005
Flash ID check:2019
Flash props sent ok
CSloader version:
070410 1557 HANCXC1250562_DB2020_CSLOADER_R3A009
loader startup: executed
loader filesystem startup: executed
loader GDFS startup: executed
Will execute script now.
Writing GDFS var 0001:084E len:0022
Success
Phone detached
Elapsed:25 secs.
ChipID:9900,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:51
Speed:921600
Flash ID check:2019
Flash props sent ok
OTP LOCKED:1 CID:51 PAF:1 IMEI:35159602****** CERT:RED
FLASH CID:51 COLOR:RED

Model:W880i
Brand:TMN
MAPP CXC article: R1JC002 prgCXC1250640_GENERIC_AI
MAPP CXC version: R1JC002
Language Package:EUROPE_1
CDA article: CDA102719/12
CDA version: R2A
Default article: cxc1250651
Default version: R1JC002

Network LOCKED
Operator: 268-06

Elapsed:5 secs.




I also retried using xs++, also without success:
16:46:22| XS++ v3.1 (Darwin) Ready !
16:46:22| Executed on Microsoft Windows XP
16:46:28|
16:46:28| Attempting to open the interface...
16:46:28|
16:46:28| TURN OFF PHONE!
16:46:28| Hold 'C' button on phone and connect phone NOW.
16:46:28| You have 30 seconds...
16:46:28|
16:46:33| Baseband ID: 9900
16:46:33| Protocol Version: 3.1
16:46:33| Warning: IMEI name does not match GDFS name (IMEI:NULL GDFS:W880)
16:46:33| ...using GDFS name
16:46:33|
16:46:33| Profiling SEMC phone...
16:46:33| Platform: DB2020
16:46:33| OTP CID: 51
16:46:33| EROM CID: 51
16:46:33| EROM Color: Red
16:46:33| IMEI: 35159602xxxxxx
16:46:33| Phone ID: W880
16:46:33| Region: EUROPE_1
16:46:33| CDA: CDA102719/12 R2A
16:46:33| Firmware Version: R1JC002
16:46:33| EROM: R3A016
16:46:33| Ready for operation!
16:46:37|
16:46:37| Sending db2020_cid01_prodid_p3j.bin...
16:46:37| Applet ID: 070129 0950 NGUCXC1250330_DB2020_PRODUCTIONIDLOADER_P3J
16:46:37| This is a PRODUCTION_ID loader
16:46:37|
16:46:37| Sending db2020_mem_patcher_cid51_r2a006.bin...
16:46:38| Applet ID: 061205 1523 HANCXC9876543210_DB2020_MEM_PATCHER_R2A006 0
16:46:38| This is a MEM_PATCHER loader
16:46:38|
16:46:38| Sending db2020_red51_cs_r3a009.bin...
16:46:39| Applet ID: 070410 1557 HANCXC1250562_DB2020_CSLOADER_R3A009
16:46:39| This is a CHIPSELECT loader
16:46:39| Activating loader...
16:46:39| Activating GDFS...
16:46:54| This loader is UNLOCKED
16:46:54| Run GDFS-script...
16:46:54| Wrote 1 variables!
16:46:54| Read 0 variables to .\Backup\W880_35159602xxxxxx_GDFSSCRIPT_OUTPUT_080 521164654.script!
16:46:54| GDFS-Script was run successfully!
16:46:54| GDFS operation was successful
16:46:56| Disconnected... Unplug the phone
The file xs++ created is empty.