Express checkout crates the same session variables that credit card checkout creates.
When the Credit Card information is entered on the checkout page and posted to the confirm page, the information is stored in a collection of session variables with names starting as "eCartCheckoutForm_<Element Name>"
Those same session variables are created on the pp_confirm.php for express checkout.