log keystrokes via Input Method Manager

# generated using capa explorer for IDA Pro
rule:
  meta:
    name: log keystrokes via Input Method Manager
    namespace: collection/keylog
    authors:
      - "@mr-tz"
    scopes:
      static: function
      dynamic: thread
  features:
    - and:
      - or:
        - api: ImmGetCompositionString
        - api: ImmGetVirtualKey
      - optional:
        - api: ImmGetContext
        - api: ImmReleaseContext