diff --git a/malware-analysis_ref_and_memo.md b/malware-analysis_ref_and_memo.md
index a34a1f7..ca718cd 100644
--- a/malware-analysis_ref_and_memo.md
+++ b/malware-analysis_ref_and_memo.md
@@ -240,7 +240,11 @@ to do...
 
 ### Decompiler
 to do...
-
+### Perspective
+- topdown
+    - コードの先頭から解析
+- bottom-pup
+    - 表層解析で得たキー情報(Win32API,怪しい文字列，etc.)の周辺から解析
 ### ref:
 - Intel系アーキテクチャSoftware Developer向けのマニュアル<br>
 [Intel® 64 and IA-32 Architectures Software Developer Manuals](https://software.intel.com/en-us/articles/intel-sdm)<br>