@PE9ZZ I am not sure how far you got on this, but earlier this year I decided to poke into this as I had a T-80 tuner with a non-functional MSM5540 and enough electronics knowledge to hopefully figure out something. As with everyone else, I was not able to find a lot of information about this IC but I did stumble into the TU-719 service manual, which actually goes into great detail about how the MSM5540 works including the time cycles and counting architecture of the original chip. It also describes the tuner operation when powering on and switching from AM to FM.
I found this one particularly excellent diagram that seemed to give some meaningful information.
so I know that the frequency input on PIN 39 is the Local Oscillating frequency which is received frrequency + IF for upper heterodyne. And I was able to confirm this on my unit with a scope and frequency counter. So since the displayed frequency is just the pin 39 LO with the IF subtraced, plus some funky math with 0.5 to "round the results to the nearest MHz", that part is easy to get a display.
Even issuing the LOCK OUT 1 signal (pin 35) is fairly straightforward once the correct receiving frequency is obtained with some reading of pin 2-5 and some math. There is a chart in the TU-719 describing offsets that can be followed.
So again I was back to the exact problem you had, the signal the manual calls VREF_CTL (I think you called this "KILL") and the analog voltage output.
There is one line in the text of the manual that basically says if the frequency is tuned at the center frequency the TR18 will be off which will allow the value at pin 33 (VREF_CTL) to be high, then a proportional analog voltage should be emitted on PIN 32. This drives a VCO to counteract drift from the center frequency (positive or negative).
I was concerned about your suspicion that there is more timing and predictive behavior here, but we are talking about late 70's ICs here so I was hopeful it would not be that complicated.
so a few months ago I decided to implement a circuit that basically just did what was described in the diagram above, using PWM and a RC circuit to make an analog voltage.
And I was shocked to see that it seemed to mostly work. its a bit touchier than the official chip but it will display frequency, quartz lock, and seems to resist tuner drift.
