Some older HP Envy series (based on Quanta ODM design) used to have fan speed at EC [0xB2-0xB3], [0xD2-0xD3] (FAN_FEEDLo / FAN_FEEDHi).
Not sure if that might apply here, but it's rather unlikely as the above models were notebooks using ENE ECs.
An Embedded Controller dump (with known high and low fan speeds) might shed some light... And maybe a DSDT dump too...