As ImageBase will not always be the same, will need to configure IDA so that the base address used is the base address used in runtime.
- Attach the process to WinDBG first. Then execute
lm m notepad(example for notepad) to get the start address for the module. - Go to IDA then load the file (for 32 bit usually is Portable executable for 80386).
- In IDA, Edit->Segments->Rebase program and enter the start address from WinDBG with a 0x prefix. (for example 1200 become 0x1200)
- In IDA, go to Options->General->Line prefixes (graph). Enable this.
- Now if you see interesting address in WinDBG, can just press G in IDA, enter the address and will reach the same address.