I have a problem that NtdllDefWindowProc_A function from ntdll is inside user32 thunk.
Following @Jason Geffner answer in ImpRec invalid thunks seem valid I tried to change it to NtdllDefWindowProc_A from user32, but when I rebuild it after the fix with PE tool the file didn't work at all.
Then I tried again and cut NtdllDefWindowProc_A function from the chunk, and the rebuild work and the file run without a problem.
its probably not a good idea to cut NtdllDefWindowProc_A from the file....So what did I did wrong?
Thanks you all for the help :-)