You can't change it safely because it doesn't have tests...
...and you can't write tests without changing it to adequately support testing.
Code undergoing test-proven refactoring will begin to experience the benefits of new unit tests, and these benefits will incrementally make new tests easier to write.
Don't forget to create integration tests for verifying user story scenarios.
Ultimately, these efforts will make the legacy codebase more maintainable.