You can try look at loaded DLLs and used APIs using API Monitor (x64) - http://www.rohitab.com/apimonitor Dont use Static Import Attach though, seems like VMProtect doesnt like it.
You can try just in case NetRipper DLL that hooks some SSL encryption APIs - https://github.com/NytroRST/NetRipper It use exactly same hook as mine.
Also, as dd2017 said, you can try look all APIs in API Monitor from advapi32.dll, wintrust.dll, crypt32.dll. You can get all function names from those DLL using DLL Export Viewer - http://www.nirsoft.net/utils/dll_export_viewer.html