I updated my MSO1104Z tonight and enabled all the options. I have the updated 00.04.04.SP4 firmware (early 2019).
1) Use a JTAG reader with openocd to read the memory of your device. See
https://www.eevblog.com/forum/testgear/sniffing-the-rigol_s-internal-i2c-bus/msg569236/#msg569236 for details.
2) I used a Segger J-Link hooked up to my Mac, installed openocd via Homebrew.
- had to add "adapter_khz 10000" to my interfaces/jlink.cfg
- had to issue a "halt" command from the telnet session once the scope was up and running.
3) I dumped memory, then compiled rigup 1.4.2 on my Mac and ran `rigup scan mso1104z.bin > mso1104z.txt` (the bin file I dumped following the above post).
4) I expect it's due to the new firmware, but in the mso1104z.txt file the serial number was wrong. On your scope go to System > System Info and edit the mso1104z.txt file with your correct serial number.
5) Run `rigup license mso1104z.txt 0x1C0FF` and you'll get a license string that will enable all options.