Hacking Sap

Full text

(1)c

(2) . ` `© ©

(3) p p p p

(4) p pp p

(5) pp p p p pp ppp p ppp p pp ppp p p

(6) p pp ppppp p

(7) p p pp. p! p" p pp p p p p.

(8) ppp p p

(9) p ppp

(10) p pp pp

(11) pp p p p p p

(12) pp p p p p pp p p p p p #$p%

(13) ppp p&! p

(14) p p

(15) p pp ppp pp

(16) p

(17) ppp p pp pp pp pp p' (p pppppp p p pp

(18) p p pppp p p pp

(19) pppp p)pppp p *p%

(20) p pp p ppp p pp

(21) p ppp ppp p pppp p pp pp

(22) ppppp p pp

(23) pp p p pp ppp pp p ppp p p p+pp

(24) pppp pp ppp ppp p p ppp p ppp p p ppp p p p pp p p pp pp

(25) pppppp

(26) pp p p p,

(27) p

(28) p p p p p-

(29) p p. p . p

(30) p%

(31) pp p,

(32) pppp p p /0p

(33) p pp

(34) p p p ppppppp p p p ! pp &pp pp% 1p p pp pp p1-2p pp p

(35) pp p ppp p pp pp pp p

(36) p p p ppp p p p pp p pppp p p ,

(37)

(38) pp p pp p pp 1%2p/.p)/p. p*p pp 1%2pp

(39) p p ppp p034pp pp pp5.p'5 p . p(p,

(40)

(41) p p

(42) pp 1%2p p pp p p

(43) p pp p% 1 p1pp5.p,

(44)

(45) p pp

(46) p p p p p 1%2p p pp p%

(47) p 1%2p

(48) p p p%/6pppp

(49) pp p p p

(50) pp p pppp ppp

(51) p p ppp p ppp,

(52)

(53) pp

(54) p p.

(55) 5 p p pppp,

(56) ppp ppp p &pp p p2pp p p5 pp pppp p p p pp

(57) p

(58) p &pp p p pppp p .2.p

(59) p p p p p2p

(60) pp p p 1%2p%/6pppp p ppp pppp pppp p p pp 1%2p

(61) p p

(62) p &p p p p pp ppppp pp p

(63) p p,

(64)

(65) ppp

(66) p p p p pp

(67) pp p1-2p7 .6p p

(68) p p pppp ppp p1-27.6p

(69) pp pp ppp pp p p

(70) pp p7.6ppp

(71) p1p p pppp

(72) p pp ppp7.6p p p ppp

(73) p pppp

(74) p p p p 2p p pp8ppppp

(75) p p

(76) p p p pp

(77) pp

(78) p

(79) p..9p. p9

(80)

(81) p

(82) pp

(83) p ppp pp.2.ppp p ppp p p ppppp p p p

(84) p,

(85)

(86) p pp

(87) p pp p

(88) p p p p p p

(89) ppp $ p2ppp p &p p p p pp p

(90) pppp p p p p

(91) pp p pp$p p p

(92) p p p

(93) pp

(94) pp pp 6p5.p p pppp pp76 p

(95) p p p1-2pp p p p p p p p1-2pp p

(96) p pp p p1-2p pp p pppppp p2ppp ppp,

(97)

(98) p p p p

(99) pppppp pp p,

(100)

(101) p p p p! p p p

(102) pp pp ppp

(103) p pp - p p,

(104)

(105) p p p p pp! pp p p! ppp pp

(106) p ppp p p pp pp ppp p p 1p p p p pp

(107) p p p p p,

(108)

(109) p p

(110) p /" pp p p

(111) p pp p pp p p p pp1-2pp p p

(112) p pp p/" p pp ppp pp

(113) p p p pppp

(114) pp

(115) p

(116) p pp

(117) p p pp p ppp p pp p pp p pp p pp p p p p p

(118) pp p pp1 p p p !p p p pp

(119) p pp ppp pp1 p

(120) p pp ppp

(121) ppp p

(122) p p

(123) p pp

(124) p

(125) p1 p pp p p p p

(126) p. p p p p p

(127) pp

(128) p p ppp p p ppp pp p ppp pp pp 1%2p.

(129) pp p%/6p p p p p pp p p p p

(130) p p p pp p p1 p

(131) pp

(132) p

(133) ppp p1ppp p p

(134) p p p ppp pp

(135) pp

(136) pp pp %

(137) pp p pp p

(138) ppp p p

(139) pp pp pp p p%

(140) p pp p +p p : p p

(141) p

(142) p p

(143) p

(144) ppp

(145) p pp

(146) p p p

(147) pp

(148) p p p p2 p

(149) p

(150) p ppp

(151) $ p p p

(152) p p; p ppp p p

(153) p p

(154) p p,

(155) p

(156) pp p

(157) p p pp

(158)

(159) pp

(160) pp $ p p4 p pp p pp p

(161) ppp

(162) p p p

(163) pppp

(164) p

(165) p p1p

(166) pp pp p pp p

(167) pp pp p p

(168) p

(169) p

(170) p pp

(171) p p p pp

(172) p ppp p pp

(173) pp ppp p p p . p

(174) . (Mariano Nuñez Di Croce)p Abstract (source: Blackhat.com) In any company, the ERP (Enterprise Resource Planning) is the heart of the business technological platform. These systems handle the key business processes of the organization, such as procurement, invoicing, human resources management, billing, stock management and financial planning. Among all the ERPs, SAP is by far the most widely deployed one, having more than 90.000 customers in more than 120 countries and running in Fortune 100 companies, governmental and defense organizations. The information stored in these systems is of absolute importance to the comp any, which unauthorized manipulation would result in big economic losses and loss of reputation. This talk will present an old concept applied to a new paradigm: SAP Backdoors. We will discuss different novel techniques that can be deployed by malicious intruders in order to create and install backdoors in SAP systems, allowing them to retain access or install malicious components that would result in imperceptibleand-ongoing financial frauds. After the description of these techniques, we will present the countermeasures that should be applied in order to avoid these attacks and protect the business information, effectively reducing financial fraud risks and enforcing compliance..

(175) Furthermore, we will release a new Onapsis free tool that will help security managers to automatically detect unauthorized modifications to SAP systems. Is your SAP backdoored? If your answer is ³I don¶t know,´ then you may consider attending to this talk. Talk Abstract ±> p p p

(176) p p

(177) p

(178) ppp p Speaker Bio ±>ppppp p p p

(179) p ppp p p pp

(180) p p 'p 'p. p

(181) p!"#$###p p p p

(182) p%#$###p pp&!'#p p. ( pp )*##p $p $p p p p +

(183) p p pp p p ,p -p pp pp

(184) p

(185) pp p p .p/ p p 0 p pp $p 0 pp 0 p p p .p+pp p p p

(186) p p p

(187) p .p 1

(188) p p ) pp p p p

(189) p p p p p p pp .p 2 p p pp ppp

(190) p .p p pp

(191) p3 p p

(192) p p .p p p p45p p p p p p $p

(193) p pp ppp p p .p Due to intrinsic Trust relationships, a high-privileged takeover of one technological component results in a complete compromise of the whole platform. p p

(194) p6pp

(195) p $pp pp pppp p p p p pp

(196) p .p p7

(197) pp

(198) p( p p 1

(199) p( p p p p

(200) pp p p p

(201) p p p p

(202) p 7(.p1

(203) p ppp

(204) p p p

(205) p p

(206) p p p p

(207) p( p .p.

(208) p

(209) p

(210) p pppp

(211)

(212) p

(213) .pp p p p

(214) pp8 p

(215)

(216) 9pp p pp

(217) p( p .p1

(218) p p

(219) p pp pppp .p 'p 'p. p p pp:p

(220) p p p p*p p p pp"#p

(221) p p p p2 )!p. p $p

(222) p( p p p

(223) pp p p

(224) p p2 )!p 1

(225) p p ppp p4p ; < < p p p

(226) p

(227) p pp p 'p 'p 'p 'p 'p. #p4p p p p !p4p p pp8+p

(228)

(229) p p 9p 'p4pp

(230) p

(231)

(232) p p p

(233) $p

(234) pp

(235)

(236) p p

(237) p4p= ppp p p4pp p'$p p p p p

(238) p

(239) pp

(240)

(241) p8 p 9 p "p4pp p $p pp p p p. 1

(242) p ppppp

(243) pp p p45p> p

(244) pp

(245)

(246) p45p p

(247) pp45p p pp

(248) pp

(249)

(250) p p

(251) p p

(252) pp

(253) p

(254) pp

(255)

(256) $p

(257) p pp p p

(258) p p8 p

(259) p 9.p1

(260) p p

(261) $pp p p p

(262) pp

(263)

(264) p p

(265) p

(266) .p1

(267) p p

(268) p pp p p $p p

(269) p pp p $pp p p p

(270) p

(271) p p p

(272) pp

(273)

(274) p8

(275) pp p p"9.p p p

(276) p p pp

(277) pp

(278) .pp

(279) ppp p $p

(280) p ppp 'p p p

(281) p pp(?p p. 'p. pp p p p 6ppp p$pp p

(282) p

(283) p p p .p1

(284) p ppp p p ; .p p ppp p'p p 'p 'p. p8

(285) pp 9p p8)

(286) p p) p

(287) p@?ppA?9p. p ppp$p p 0 p p p p pp pp

(288) p 0 p p 'p 'p. 1p>B6>p p p p 1p>B6=6 p p pp8 9p.

(289) 1p p p

(290) p p

(291) p pp>p .p p

(292) ppp pB-.p (

(293) p p p

(294) p ppp $p p p p +

(295) p p

(296) p

(297) p $p

(298) pp pp p

(299) p p

(300) p .p1

(301) ppp >pp p

(302) pp pp pp

(303) p .p p45p pppp

(304) p p

(305) p

(306) p p pp pp p p p p p p p

(307) p .p1

(308) p p p p

(309) p pp p p

(310) pC p p

(311) p p p .p pp

(312) p

(313) pp p p p pp p p p p p

(314) p .p 1

(315) p p p

(316) ppp pp8?DEDDF G9pp

(317) p ppp

(318) p.p p 0 p $p

(319) p

(320) p p p p .p p

(321) p

(322) $p

(323) p p pp

(324) )pp

(325) p p p p p

(326) p A1p8( p

(327) p 9pp'p

(328) pp .p1

(329) p

(330) p p

(331) ppp

(332) p p p.p1p p

(333) $pp pp pp p pp pp p

(334) ppp A1p p

(335) p p p .p1

(336) p p

(337) p p

(338) p p p p

(339) pp

(340) pp p p

(341) p .p p)5p> pp pp

(342) p A1p p p ppp 45p p p p pp p p

(343) p A1p p pp p $pp pp

(344) p p pHp pp

(345) p p p pp pp

(346) p pp p p p .p p 0 p p p p pp p p pp

(347) p

(348) p p p .p 'p BC p pp.p. 'p. 6 p p pp p 1pp pp pp'p p8 p21p9p +

(349) ppp ,p 0 p p p p p pp p

(350) p p p p 'p 'p. ppp

(351) p 0 pI= pp J

(352) p 1

(353) p p pp

(354) p pp p p

(355) pp0 p p. 6 p p p p

(356) p

(357) p pp pI

(358) Jpp p p p pKp p$pp pp p $p p

(359) ppp.

(360) 1

(361) p

(362) p pp pp ppp p p p .p p p pp p3 pp p$p

(363) pp pppp p 'p pp pp p p p pp p $p

(364) p 0 pp p p p

(365) p p p p 'p p pppp p p p 'p 0 pp p

(366) pp. 'p. p p p pp

(367) p

(368) p p p p p > p p

(369) pp 'p - p p 'p p1 p 'p p p 'p 6 0 p p pp pp

(370) pp p pp )

(371) p p .p. 'p 'p. . P

(372) p p p p

(373) pp pp pppppppp

(374) p p

(375) pp ppp ppp pppppp p

(376) pp p p pp

(377) !p p

(378) p p pp p

(379) p " pp p#

(380) p$"pp pppppp p

(381) p pppp $"p %p&'' '(pp ) p %p(pp $"p%p& pp& p

(382) p!pp

(383) p

(384) pp *%pp+,+,+++p -%pp,.,////pp p p 0 %p(pp pppppp p1*2pp 3 p

(385) p4 pp .pppppp5

(386)

(387) p

(388) pp6"pp

(389) ppp p

(390) p1-&271*2pp

(391) p

(392) p6"pp 8pppppp3 p

(393) p3 p- p pp pppppp p

(394) p"3pp !p p1*.2pp 3pp "pppppp p

(395) p"3ppp !p

(396) p pp

(397) p pp

(398) p pp" pp p.

(399) 1-&2712pp0 pp 9pppppp& p p.pp8p((p

(400) pp6"p pp : "

(401) p ; p& pp ppppppppp p+++pp

(402) p p

(403) p p

(404) p'' pp +<pp pppppp p

(405) p'" p ppppp pppppp p

(406) p=p p"pp .pppppp:

(407) p p'p ppp =p

(408) p->!p p

(409) p? p"pp 8pppppp:

(410) p p((p

(411) p p pp'" p >!p p p

(412) p

(413) p1 '2p p

(414) p p pp pp p

(415) p

(416) p"pp pp 9pppppp:

(417) p p

(418) ppp&'pp@)>!p p

(419) p? p"pp <pppppp:

(420) p p' p-p>!p p

(421) p? p"pp Apppppp:

(422) p p' pp-p >!p p

(423) p? p"pp pppppp:

(424) p p' p pB ppp >!p p

(425) pCp"pp -ppp ppppppppp p+++pp

(426) p p

(427) p pp -pp pppppp)pp-!ppp

(428) p

(429) p p-%p p pp-p 'p

(430) p" p pp pppppp-

(431) ppp(

(432) (p pp p pppp0 p p

(433) pppp

(434) p" p pp pp !p

(435) p pp p((p

(436) p pp p1-&27pp0 pp

(437) !p p

(438) p

(439) p p"pp p p pp .pppppp*p

(440) p 0 0 p !p p-p& pp 8pppppp*p

(441) pp !p p6p

(442) p pp 9pppppp p

(443) p? p"p

(444) p p((p pp p

(445) pp pp

(446) p. pp p pp ppppppppp

(447) p p pp

(448) p p

(449) p ppp -pp pppppp p1*92pppp

(450) p((p 0 0 pp .pppppp'" p pp

(451) p1 '2pp

(452) p p

(453) p pp 8pppppp*p

(454) p3p p p

(455) p& 4 !p

(456) ppp 9pppppp p

(457) p-p& 4 p"3!p p

(458) pp" p p

(459) p p p

(460) pp 3 pp p1 2pp0 pp <pppppp p

(461) pp

(462) pp6p pp

(463) p4 pp p1-&271*2ppp

(464) ppp Apppppp p

(465) p- p p"3!p p

(466) p 0 p pp

(467) p p p pp p 1 2pp0 pp pppppp p

(468) p1? 2p"ppp

(469) ppp ppp 8pp pppppp*p

(470) p-" p0 p !p p' p=2p

(471) pp.

(472) pppppp:

(473) p p

(474) p

(475) p" pp = !p p

(476) p

(477) p"pp .pppppp'" p pp pp

(478) p= p pD pp p+++!p++pp+<<Epp 8pppppp' p pp%pp p %pppp

(479) ppp((p = p"6 %pp

(480) p

(481) p p pp = p"6 p

(482) %pp

(483) pp pp = p ;p pp %p p pp p%pp p 0 p+pp & p

(484) pp--pp --%pp --pp--p pp 9pppppp p1-&27pp0 pp <pppppp& p p8p

(485)

(486) p<p((p pp pp p p

(487) p pp +<pp pppppp p

(488) p p

(489) p p"pp pppppp p

(490) p"p pp" pp .pppppp*p

(491) pp !p p p p" pp 8pppppp*p

(492) pp !p pC p" pp 9pppppp p1-&27pp0 pp p) pp -pp pppppp p1*92pppp

(493) p p0 0 pp pppppp'" p pp

(494) p1 '2pp

(495) p p

(496) p pp .pppppp p1*92pp

(497) p

(498) ppppp 8pppppp p

(499) ppp

(500) pp p

(501) p p 3p p" p

(502) ppp

(503) p

(504) pp p

(505) pppC -pp

(506) p!p

(507) pp

(508) p3p !p p

(509) p 4 p

(510) p ppp p

(511) pp" pp p1 2pp-

(512) p p

(513) p? p"ppp

(514) p pp 9pppppp5

(515)

(516) p

(517) ppp p

(518) p p 4 p pp <ppppppp

(519) p p((p !p p

(520) p p pp

(521) p p

(522) p p"pp Apppppp p1 2pp p

(523) p

(524) p((pp pp App pppppp&p

(525) pp p p pp pppppp-

(526) pp" p

(527) p" p

(528) p pp

(529) pp

(530) pp pp-pp .pppppp

(531) p

(532) p6"pppp

(533) p" pp'pC -p

(534) pppp pp : p pp p

(535) p6"p" pp p" p pp 8pppppp p1-&27pp0 pp .App pppppp p

(536) p pppp $"p %p C- &-(pp ) p %p(pp $"p%ppp

(537) pp *%pp+,+,+++p -%pp,.,////pp p p 0 %p(pp pppppp5

(538)

(539) p

(540) p6"p

(541) pp p" pApp p1-&271*2pp p

(542) p.

(543) 6"pp .pppppp p

(544) p p"pp 8pppppp p

(545) p&F p pp p1-&2715 *-271*A2pp p

(546) p p p 9pppppp p

(547) p) p"3!p p

(548) p" p p((p

(549) p p pD p#G')&!p #-5!p#-5Epp <pppppp p1-&27pp0 p

(550) p

(551) pp Apppppp p1*.2ppp" pp

(552) pp6"p pp pppppp p

(553) pp p"pp /pppppp p

(554) p p"pp +ppppp p1-&27pp0 p

(555) p

(556) pp ppppp p1-&27ppp0 pp

(557) p

(558) pp

(559) p6"pp ppppp$"ppp p p0 pp p1*2pp

(560) p

(561) ppp6"pp .ppppp pp p1*2p 0 p ppp(

(562) (pp p

(563) ppp

(564) p6"pp'pp ( (pp

(565) p6"pp p pp 8pp pppppp*p

(566) p-" p0 p !p p' p=2p

(567) pp pppppp:

(568) p p

(569) p

(570) p" pp = !p p

(571) p


(573) p= p pD pp p+++!p++pp+<<Epp 8pppppp p

(574) p pp p 0 ppp 9pppppp p1-&27pp0 pp <pppppp& p p.p

(575)

(576) p9p((p pp pp ' p p p pp &H+pp pppppp*p

(577) p) p !p p p p

(578) p p 0 p 0 ppp DC %ppp p 0 pp

(579) p p pp" p Epp pppppp p

(580) p' p p

(581) pp pp !p p1*.2pp 0 p(

(582) (p pp .pppppp p

(583) p p pp p1*82pp"ppppp pp 8pppppp*p

(584) pp p pp

(585) p p p

(586) p

(587) p p p pp 9pppppp*p

(588) p p !p p' !p

(589) pp0 !p

(590) ppp pp <pppppp:

(591) p !p p

(592) p? p"pp pp0 pp

(593) p p Apppppp:

(594) p pp p

(595) p pp

(596) p p p 0 !p p

(597) pCp"pp pppppp& p p.p

(598)

(599) pAp((ppp p p

(600) p

(601) p p pp & p p pp &H+8pp pppppp*p

(602) p p p !p p- " pp pppppp pCp pp p

(603) p

(604) p"pp .pppppp5

(605)

(606) p++%++pp

(607) p p

(608) p pp p

(609) p' p p"pp 8pppppp pp

(610) p p pp !p

(611) p

(612)

(613)

(614) p

(615) pp pp

(616) pp pp p

(617) p' p p"pp 9pppppp pp

(618) p p p !p p1-&27pp0 pp <pppppp p p"pp p " !p p

(619) p

(620) p"pp

(621) p p? pp 0 p

(622) p p " pp Apppppp p1*.2ppp" pp

(623) pp&H+8p pp pppppp&

(624) p pp pp

(625) p p p pp p' pp /pppppp p

(626) p? p"pp p

(627) p pp +ppppp& p pp

(628)

(629) p/p((p pp p pp ppppp p1*92pp pp( (p p pp.

(630) ppppp pp pp(

(631) (p p((p

(632) p p pp .ppppp p1-&27pp0 pp 8ppppp p1*<2pp pp( (p pp 9ppppp*p

(633) p p !p p# pp p !p

(634) pC p !p

(635) p pp <ppppp p1*.2ppp" pp

(636) pp&H+8p pp Appppp p

(637) p? p"pp0 pp ppppp*p

(638) p p p !p p- " pp /ppppp pCp pp p

(639) p

(640) p"pp +ppppp5

(641)

(642) p

(643) p++%++pp

(644) ppp p1*2p ppppp5

(645)

(646) p

(647) p++%++pp

(648) p"pp p1*2p ppppp p

(649) pp"pp .ppppp p1*82pp p

(650) p p p p"0 pp 8ppppp p1-&27pp0 pp ' p) p* pp .pp ppppppp p

(651) p pppp %pp(pp ) %p(pp *p%p+,+,+++pp *p %p++%++%++pp pppppp p1 2pp p

(652) pppp p 4 pp .pppppp pp

(653) pp p 4 p

(654) 0 pppp&&!p

(655) ppp pp p

(656) p 4 p" p p1*92pp pp !p

(657) p p

(658) p) p& p !p

(659) p' pp 8pppppp p

(660) p p"pp p

(661) p pp ' p#

(662) p p pp .9pp pppppp*p

(663) pp !p p ppp pppppp p1

(664) 271*2pp pp

(665) p"

(666) pp pp .pppppp p

(667) p

(668) p"pp pp 8pppppp p

(669) p? p"ppp

(670) p pp & ; ppp 'pp pppppp*p

(671) pp p p =ppp pppppp

(672) pp

(673) p"3 pp p+p((pp pp .pppppp p

(674) p3 p"pp 8pppppp p !p p1*.2p pp p" pp

(675) pp'p pp 9pppppp*p

(676) pp p p

(677) p pp <pppppp p

(678) p' pp"pp pp pppppp*p

(679) p- p" p !p p p

(680) pp pppppp:

(681) p

(682) p

(683) pp !p p

(684) p' pp"ppp ' p 0p# pp "6 pp <pp.

(685) pppppp p1*2pp(

(686) (ppp

(687) p pp pppppp p

(688) p pp"pp & p ppp*3 pp -pp pppppp'" p pp

(689) p p*3p pp pppppp*p

(690) p p p- p !p p

(691) p p"p

(692) pp" p*3pp .pppppp p

(693) p p !p'$)-ppC&?pp 8pppppp'" p pp

(694) p p-p pp 9pppppp*p

(695) p p p- p !p p

(696) p p"p

(697) pp" p pp <pppppp p

(698) p p !p'$)-ppC&?pp 6p&*p pp 9/pp pppppp3p

(699) p-, p p pp pppppp'" p pp

(700) pp p pp .pppppp

(701) p

(702) p p

(703) pp p 0 pp p pppp

(704) p p C C=& ')- Cp pppp p

(705) pp pp 8pppppp p

(706) p- p p"pp p

(707) p pp 9pppppp p p1-&27pp

(708) p1*.2pp0 pp( (pp

(709) ppp&*pp <pppppp& p pp

(710)

(711) p9p((p

(712) pp&*p pp 0 p p pp ) pp p p(

(713) (p ppp p pp #'pp pppppp:

(714) p pp p

(715) p !p p

(716) p

(717) p"pp pppppp p

(718) p p p p p"3!p p1*82pp .pppppp p pp

(719) p p p p p

(720) p p" p

(721) pD p : &'8++Epp 8pppppp p

(722) pC p p p !p p

(723) p

(724) p p p p

(725) p" p p p(

(726) (p p

(727) p pD : -&C8++EpppC %p p,:p"p p p" p pp

(728) p

(729) p pp 9pppppp' = p

(730) p- p&pp3 p

(731) pp( (p pp" ppp <pppppp*p

(732) pp !p p3 pp" p Apppppp p

(733) p

(734) p"p

(735) p pp ppp 0 pp pppppp p

(736) p p"p

(737) p p((p

(738) p

(739) pp /pppppp p127pp0 pp +ppppp) p.Appp

(740) p6"pp ppppp:

(741) p6"pp !p p pp

(742)

(743) p+p((p pp p p p

(744) p pp" p

(745) pp 6p p p pp pp pppppp3p pp& 0p !p

(746) p p pp pppppp pp

(747) p 3 p p" p' p p pp .pppppp p

(748) p

(749) p"pp p

(750) p

(751) p

(752) pp p pp 8ppppppIpp.

(753) p p pp" p" pp D& ppC p.9<8.p((p p' Epp 98pp pppppp pBJ-++#pp

(754) p-" ,B p"3pp pppppp p

(755) pG p "6 ppp .pppppp p

(756) p ,

(757) p"pp 8pppppp p p. p p((p 4 pp 9pppppp

(758) p

(759) p& p pp!pp !p p pp <pppppp p127pp0 pp Apppppp p1 2p((p p

(760) p p p

(761) pp pp

(762) p Kp" pp pp pppppp?p p p((ppp pp( (p ppp /pppppp& p pp

(763)

(764) pp((p

(765) pp"6 pp?p p p

(766) p p p p p"0 pp BJ-++#JGpp BJ-+/.#J+pp BJ-+/.#J+pp # ppD&.p5&p p Epp 9/pp pppppp3p-, p pp pppppp5

(767)

(768) p# A+=)=-Fpp p

(769) p

(770) p"pp .pppppp

(771) p

(772) pp pp LL1

(773) 2LL1 '2L?LFL&)CL-*<+&B&Fpp 8pppppp'" p

(774) p

(775) p p

(776) pp ppp

(777) p p 0 p 9pppppp p1-&27pp0 pp <pppppp p

(778) p- p p"pp pp p

(779) p ppp. !p p

(780) p p pp 0 p

(781) p pp .pp pppppp p

(782) pp !p p&)#-)+pp pppppp p1*2pp 3 pp .pppppp pp# p0 pA+p 8pppppp p1*2pp 3 pp 9pppppp# p

(783) p( (p3p pp p

(784) p p !p p

(785) p p pp 0 pp & p'#.p

(786) pp '#.pp pppppp)p

(787) ppp p" p

(788) p

(789) !p p

(790) p'#.p pp ppp 8pp pppppp*p

(791) p-" p0 p !p p' p=2p

(792) pp pppppp:

(793) p p

(794) p

(795) p" pp = !p p

(796) p


(798) p= p pD pp p+++!p++pp+<<Epp 8pppppp' p ppp pp p pp ' 0 pp p %pp;pp.

(799)

(800) ppp((p = p"6 %pp p pp

(801) pp = p"6 p

(802) %pp


(804) pp--pp --%pp --pp--p pp @ p pp p %pppp

(805) ppp((p = p"6 %ppCp

(806) p pp = p"6 p

(807) %ppCp


(809) pp--pp --%pp --pp--p pp -pp p %pp pp

(810) ppp((p = p"6 %ppCp

(811) p pp = p"6 p

(812) %ppCp


(814) pp--pp --%pp --pp--p pp "3pp p %pppp

(815) ppp((p = p"6 %pp

(816) p

(817) p p pp = p"6 p

(818) %pp


(820) pp--pp --%pp --pp--p pp 9pppppp p1-&27pp0 pp <pppppp& p p8p

(821)

(822) p<p((p pp pp p p

(823) p pp p(

(824) (p pp

(825) p ppp' 0 pp"3p pp +<pp pppppp p

(826) p p

(827) p p"pp pppppp p

(828) p"p ppCp" pp .pppppp p1-&27pp0 pp & p# p$"pp !pp" p6"!p 3 p((p pp6"p

(829) 0 p" p pp

(830) p Dp

(831) Epp T

(832) p .

(833)

No results found