Who wrote it, and can you pick their brains?
Do you have an up-to-date spec, or can you watch the users run the code?
Did the author use warnings and use strict?