diff --git a/readme/grub.md b/readme/grub.md
index 2b54c9a..d618a0b 100644
--- a/readme/grub.md
+++ b/readme/grub.md
@@ -1,21 +1,189 @@
 # GRUB
 
+## Devices
+
+* (crypto?)
+* (hd?)
+* (hd?,*)
+* (lvm/*)
+* (md/*)
+* (memdisk)
+
 ## Commands
 
-* crc
+### arm
+
+* xen_hypervisor
+* xen_module
+
+### bios
+
 * drivemap
-* false
-* gettext
+* sendkey
+
+### x86_64-efi-signed
+
+#### denied
+
+##### lockdown
+
+* acpi
+* badram
+* cutmem
+
+##### secure boot
+
+* all_functional_test
+* appleloader
+* backtrace
+* blocklist
+* cbmemc
+* cmp
+* coreboot_boottime
+* crc
+* date
+* eval
+* extract_legacy_entries_configfile
+* extract_legacy_entries_source
+* extract_syslinux_entries_configfile
+* extract_syslinux_entries_source
+* fakebios
+* file
+* fix_video
+* functional_test
 * gptsync
+* hashsum
+* hdparm
+* hello
+* hexdump
+* hexdump_random
+* inb
 * initrd16
+* inl
+* inw
+* keymap
+* kfreebsd
+* kfreebsd_loadenv
+* kfreebsd_module
+* kfreebsd_module_elf
+* knetbsd
+* knetbsd_module
+* knetbsd_module_elf
+* kopenbsd
+* kopenbsd_ramdisk
+* legacy_check_password
+* legacy_configfile
+* legacy_initrd
+* legacy_initrd_nounzip
+* legacy_kernel
+* legacy_password
+* legacy_source
 * linux16
+* loadbios
+* lsacpi
+* lscoreboot
+* lsmmap
+* lspci
+* macppcbless
+* mactelbless
 * md5sum
 * module
+* module2
 * multiboot
+* multiboot2
+* nativedisk
+* outb
+* outl
+* outw
+* parttool
+* password
+* pcidump
+* rdmsr
+* read
+* read_byte
+* read_dword
+* read_word
+* setpci
+* sha1sum
+* sha256sum
+* sha512sum
+* syslinux_configfile
+* syslinux_source
+* test_blockarg
+* testload
+* testspeed
+* time
+* tr
+* usb
+* videoinfo
+* videotest
+* write_byte
+* write_dword
+* write_word
+* wrmsr
+* xnu_devprop_load
+* xnu_kernel
+* xnu_kernel64
+* xnu_kext
+* xnu_kextdir
+* xnu_mkext
+* xnu_ramdisk
+* xnu_resume
+* xnu_splash
+* xnu_uuid
+
+#### allowed
+
+* .
+* [
+* authenticate
+* background_color
+* background_image
+* boot
+* break
+* cat
+* chainloader
+* clear
+* configfile
+* continue
+* cpuid
+* cryptomount
+* distrust
+* dump
+* echo
+* exit
+* export
+* extract_entries_configfile
+* extract_entries_source
+* false
+* fwsetup
+* gettext
+* halt
+* help
+* initrd
+* initrdefi
+* insmod
+* keystatus
+* linux
+* linuxefi
+* list_env
+* list_trusted
+* load_env
+* loadfont
+* loopback
+* ls
+* lsefi
+* lsefimmap
+* lsefisystab
+* lsfonts
+* lsmod
+* lssal
+* menuentry
 * net_add_addr
 * net_add_dns
 * net_add_route
-* net_nootp
+* net_bootp
+* net_bootp6
 * net_del_addr
 * net_del_dns
 * net_del_route
@@ -27,81 +195,39 @@
 * net_ls_dns
 * net_ls_routes
 * net_nslookup
-* parttool
-* play
-* rdmsr
-* sendkey
-* sha1sum
-* wrmsr
-* xen_hypervisor
-* xen_module
-
-* hashsum
-* help
-* insmod
-* nativedisk
-* rmmod
-* sha256sum
-* sha512sum
-
-* background_color
-* background_image
-* boot
-* cat
-* clear
-* configfile
-* cryptomount
-* date
-* echo
-* export
-* halt
-* initrd
-* keystatus
-* linux
-* list_env
-* list_trusted
-* load_env
-* loadfont
-* loopback
-* ls
-  * (crypto?)
-  * (hd?)
-  * (hd?,*)
-  * (lvm/*)
-  * (md/*)
-  * (memdisk)
-* lsfonts
-* lsmod
-* menuentry
 * normal
 * normal_exit
+* password_pbkdf2
+* play
 * probe
 * reboot
 * regexp
+* return
+* rmmod
 * save_env
 * search
+* search.file
+* search.fs_label
+* search.fs_uuid
+* serial
 * set
+* setparams
+* shift
+* sleep
+* smbios
 * source
 * submenu
 * terminal_input
 * terminal_output
 * terminfo
+* test
 * true
 * trust
 * unset
 * verify_detached
-
-### x86_64-efi-signed
-
-#### allowed
-
-* sleep
-
-#### denied
-
-* eval
-* read
-* videoinfo
+* zfs-bootfs
+* zfsinfo
+* zfskey
 
 ## Variables