Hi all, many thanks for everyone's work in this thread and others.
Three days ago I ordered the DS1052E from Amazon (Amazon Prime; $4 next day shipping), and yesterday I hacked it! The unit reported itself as HW57 (serial DS1ED122XXXXXX) and came with 00.02.04.00.03 firmware, which necessitated using a patched version of 00.02.02.02.00 (although I didn't try unpatched, since it reportedly fails). To transfer the firmware, I used a new Sandisk Cruzer 2GB USB stick (which I tested first by capturing and storing a waveform, then checking it on my computer). To overwrite the model and serial number, I used Shafri's utility (running under Parallels Desktop 6.0 on Mac OS X 10.6.5) with the USB cable that came with the unit. After the hack, I upgraded to 00.02.04.01.02 (2.04 SP1) and then performed a self calibration. It definitely appears to have worked, although I don't have precision signal generators and such to quantitatively analyze it (hence the budget oscope).
Regarding the HV supply, it appears (by peaking in the rear right vent with a keychain flashlight) that mine also does not have one, so the search for the difference between 57 and 58 continues. If it'd facilitate further low cost enhancement of my oscope, I may be persuaded to pull it apart and take pics at some point... I hadn't planned to, but I'm kind of curious, myself.
Cheers and thanks again,
Will