@Suiseiseki I tried to see if the CPU cooler fan had any teardowns or information on the internal circuitry but couldn't find anything. It's possible that also uses a generic MCU to handle the PWM signal input to brushless speed control, easier for them to tweak the behaviour that way after all. There might even be such fans out there that have an exploitable ICSP trigger on the four wire connector!