The PIC uses I2C to communicate with the configuration EEPROM, so a little snooping on the bus went a long way. Dumping things out led to finding the frequency settings. By part six of the post ...
Some results have been hidden because they may be inaccessible to you