I installed ESPHome and from the logs, the fans/remotes are using rolling codes. Looks like it'll take some reverse engineering...
The PCB in the remote has a model number on it: QZ0009RF-V06
Unfortunately I can find no reference to this online.
The only chips on the board are an unlabeled SOIC16 and a very small SOIC6 (whose label is too small for my eyes to read).
Guessing that the SOIC16 is the microcontroller and the SOIC6 is the RF transmitter. There's also a 13.560 MHz crystal, so I suppose it transmits at 433.92 MHz (13.560 x 32).
The PCB in the remote has a model number on it: QZ0009RF-V06
Unfortunately I can find no reference to this online.
The only chips on the board are an unlabeled SOIC16 and a very small SOIC6 (whose label is too small for my eyes to read).
Guessing that the SOIC16 is the microcontroller and the SOIC6 is the RF transmitter. There's also a 13.560 MHz crystal, so I suppose it transmits at 433.92 MHz (13.560 x 32).