As a 30 year IT professional and SQL dude - I can tell you that taking 8 hours to look at 30 year old code means nothing. There are external processes, internal processes, etc. It is unpossible to make any accurate assessment without weeks and weeks of work.
Comments
How much code could have been installed? How many backdoors could have been installed?