To remain within legal boundaries, you should dump the ISO from your own physical copy of the game. If searching for downloads, prioritize reputable community-vetted sources to avoid malware.