The 30 day trial option that comes with the scope is a kind of a "hack" from Agilent's side to give you the options without generating the licences and compromising the private keys used for signing the licenses. At least it was so in fw 2.38...
The scope uses some variables in its "secure storage" (which seems to be encrypted part of the flash).
When starting it checks if the demo was never used before. Then when you start it it remembers when the demo should expire, how many days you have left and current date.
When the scope starts up it checks the time difference between stored "current date" and current time and figures out how many days have passed.
It also checks if you are past the "demo expiry date"
It also remembers the "current date" if you manually set the clock. So dialing forward to 2176 or something like that ans starting the demo, dialing clock back... will not trick it.
So... 30 days trial period does not mean 720 working hours it means 30 realtime days (counted in seconds if I remember correctly)
if infinivision.dll is in the nk.bin.comp and this is encrypted/signed and verified somewhere in the boot process this means that hacking will be very difficult with high potential to brick the scope...
Oh... and the "Unfinalized software" message does not come from any signature and/or checksum failure... it is a side of patching the dll. You basically modify a function to always return false. The true value of that function is otherwise stored in the "secure storage"...