Hello,

is there a way to created a memory resident Bootloader that worked
on new NTFS and can be make operations in Windows?

Explain the situation...

Hello,

i mean.

Hard-Disc formated NTFS, WinXP
Writing Bootloader on MBR that that start WinXP Kernel on NTFS File-System.
Than Loader wait and start when Windows startup, make
a messagebox with the WinAPI?

Is there a way that a Bootloader can use WinAPI?

You can't use win32 api's since they are actually inside of dll's loaded when windows loads. That and you would also need the entire gdi subsystem loaded to draw pixels to the vesa adapter since the win32 api's are based on gdi.

A bootloader gives up execution to the winxp bootloader on the partitions mbr so once you pass on to windows you loose the ability to run anything.

If you wanted to insert code into some windows component that would execute after windows has loaded you might be able to do that, but it would not be easy since you can't just throw it in there anywhere and expect it not to crash.

Another problem with that is that Windows Vista uses ASLR, which means that patching up a Windows Component at runtime is not going to work under Vista or Longhorn Server (without crashing the system 99.99999% of the time).

It would be easier to just add a windows application to the startup folder, as a service, or in the registry that loads when the desktop does (a service loads when the drivers do).
Thats how most spyware programs "embed" themselves- in windows you can even force a dll to load into every process by modifing the right registry key or do it one process at a time and actually inject a dll at runtime. (called a hook)
Thats how antivirus programs insert those annoying wigets into the explorer system tray (not the icons, i mean they make there own tray next to the system tray).