Replace pkg_resources resource lookups

pecli/paths.py

@@ -0,0 +1,8 @@
+import os
+
+
+PACKAGE_ROOT = os.path.dirname(os.path.abspath(__file__))
+
+
+def data_path(filename):
+    return os.path.join(PACKAGE_ROOT, "data", filename)

pecli/plugins/check.py

@@ -3,9 +3,9 @@
 import datetime
 import os
 
-import pkg_resources
 import yara
 
+from pecli.paths import data_path
 from pecli.plugins.base import Plugin
 
 
@@ -233,7 +233,7 @@ def check_tls(self, pe):
 
     def check_peid(self, data):
         """Check on PEid signatures"""
-        peid_db = pkg_resources.resource_filename("pecli", 'data/PeID.yar')
+        peid_db = data_path("PeID.yar")
         rules = yara.compile(filepath=peid_db)
         matches = rules.match(data=data)
         if len(matches) > 0:
@@ -294,7 +294,7 @@ def check_pe_resource(self, pe) -> bool:
         return suspicious
 
     def check_yara(self, pe, data: bytes) -> None:
-        yara_rules = pkg_resources.resource_filename("pecli", "data/other.yar")
+        yara_rules = data_path("other.yar")
         if not os.path.isfile(yara_rules):
             print("Problem accessing the yara database")
             return

pecli/plugins/crypto.py

@@ -1,9 +1,9 @@
 #! /usr/bin/env python
 import os
 
-import pkg_resources
 import yara
 
+from pecli.paths import data_path
 from pecli.plugins.base import Plugin
 
 
@@ -25,7 +25,7 @@ def convert_physical_addr(self, pe, addr):
         return (None, None)
 
     def run(self, args, pe, data):
-        crypto_db = pkg_resources.resource_filename("pecli", "data/yara-crypto.yar")
+        crypto_db = data_path("yara-crypto.yar")
         if not os.path.isfile(crypto_db):
             print("Problem accessing the yara database")
             return