i.e. when the program is running, and x64dbg is attached to the process - how can i see where it is at this moment? enter image description here

  • 1
    I don't know if I understood correctly but as you haven't marked mrexodia's answer as the correct one I was wondering if you mean on how to set the view to where the current thread execution is. You can do so by double clicking the RIP register. Commented Jul 3, 2018 at 17:22
  • @MichaelPittino this question was a while ago, but now i can't understand well, why i've marked that answer. I really want to know where the current application execution/thread is at this moment
    – T.Todua
    Commented Dec 1, 2018 at 10:52
  • 1
    In CPU view right click -> go to -> origin
    – Gero B.
    Commented Aug 16, 2020 at 17:57

2 Answers 2


From your screenshot I understand that you want to break on. You can do this by breaking on the debug string event. Use the following setting:


If you want to pause the execution, simply click the “pause” button. If you want to see the current instruction executes you can use the “Threads” tab and double click the EIP/RIP column of one you’re interested in.

  • 1
    can you remind me where is the RIP column?
    – T.Todua
    Commented Nov 18, 2018 at 17:25
  • 1
    The column with the name RIP or EIP (depending on what architecture you’re debugging)
    – mrexodia
    Commented Nov 18, 2018 at 17:26
  • yes, i see the EIP . thanks!
    – T.Todua
    Commented Nov 18, 2018 at 17:42

Use the keyboard shortcut Ctrl+G (go to expression) and type eip or rip depending on your architecture.

enter image description here

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.