Maloader[0] is a similar (smaller, easier to understand) project that runs in userland. It's a nice code base to read and there's this nice presentation about it[1].

[0] https://github.com/shinh/maloader [1] http://shinh.skr.jp/slide/ldmac/000.html