I've been talking with someone in Australia who has successfully cloned a THGR810 sensor.
I was surprised to learn that timings are extremely critical.
1. RF pulse widths and spacings need to be accurate to about 15 microseconds.
2. Time between transmissions must also be quite accurate.
The receiver hardware in OS consoles is powered down most of the time -- it is only powered up when a transmission is expected. If the transmission does not arrive at the expected time it will be missed. The only time the receiver is continuously turned on is during search mode.
The author sent me a copy of his design, which I have made available on this web page:
http://www.osengr.org/Projects/Canberra-Wireless-Sensor/Canberra-Wireless-Sensor.htmlIf anyone tries this, please post back here and let us know how it works...