is the legacy app layered?
if so, add units tests to the back-end/business layer first
if not, add unit tests to new code going forward, and when bugs are discovered (for regression testing)
if you have the time/ambition to unit test the whole thing (eventually), start a list of features (critical ones first) and add unit tests for those, a few at a time
