Harry arrives at the custody block at 11:10 pm and retrieves the key to Sivertsen’s cell. Inside, Harry outlines the evidence to Sven, highlighting the diamond and gun in his briefcase, plus confirmed trips to Oslo on all murder dates. Harry asks if Sivertsen knows Tom Waaler. Sivertsen’s quick denial confirms Harry’s theory that Waaler (a suspected arms smuggler) used Sivertsen as a courier and planned to kill him during the arrest to prevent exposure. Harry assures Sivertsen that Waaler is not going to protect him; in fact, he is now a liability that Waaler wants to see dead. As they converse, Sivertsen drinks some water that Harry has given him.

Harry claims to have poisoned Sivertsen’s water. Sivertsen begins vomiting and, panicked, explains the events of Saturday night from his point of view. He was surprised to see Waaler at Villa Valle and couldn’t understand why Waaler was shouting about a weapon, even though Waaler didn’t have a gun. Sivertsen admits to being involved in smuggling guns and diamonds but denies having killed anyone. Harry offers a fake “antidote pill” in exchange for testimony against Waaler. Sivertsen agrees, believing cooperation is his only option. Harry then reveals the pill is merely a sleep aid and the water was never poisoned. Harry bluffs the duty officer into letting him sign Sivertsen out, supposedly for questioning. Harry and Sivertsen exit into the night.

Rakel wakes at 12:45 AM thinking Harry has arrived but finds only the front door blown open by the wind. She locks up and accepts Harry is not coming.

Harry drives Sivertsen to the student residence (where Marius was killed). He handcuffs their wrists together. Inside the building, Sivertsen threatens Harry with a chisel (the one that Harry took from Lisbeth’s room and which Sivertsen picked up in Harry’s car). Sivertsen issues an ultimatum: He will provide evidence against Waaler only if Harry first identifies the real Courier Killer and clears his name. His girlfriend is pregnant, he explains, and he cannot accept decades in prison. Harry pretends to agree, Sivertsen hands over the chisel, and they continue to the fourth floor.

In room 406 at 1:10 am, Harry handcuffs Sivertsen to a radiator, frustrated that Sivertsen’s ultimatum has derailed his plan to quickly expose Waaler. Sivertsen recounts his criminal history: At 17, he travelled to Berlin to meet his biological father and began working for him, smuggling diamonds. He eventually moved to Prague, where he met and fell in love with Eva. Seeking more lucrative work than jewel smuggling, he began smuggling weapons, which led to meeting “Prince” (Waaler).

Sivertsen explains how, several months earlier, an anonymous client contacted him with disconcertingly detailed knowledge about his background. The client wanted Sivertsen to personally deliver a five-pointed diamond and a Czech gun with a silencer. Sivertsen had to deliver the items to a specific drop-off point in a popular Oslo park at precisely 5:00 pm. After the first drop off, the client requested another drop five days later. This process repeated; every time a murder took place, Sivertsen was in Oslo, giving the impression that he was the one carrying out the crimes.

At 2 AM, Olaug Sivertsen calls Beate and reports that her tenant, Ina, has not come home. Beate is startled because she never knew Olaug had a tenant. Olaug explains that Ina had said she was spending the weekend at a holiday cabin with her lover but was expected to have returned by now. Afterwards, Beate receives another call, this time from Harry. He tells her she is the only person he can trust.

At 6:00 am, the Divisional Commander meets with Torleif, Møller, and Waaler about Harry’s escape with Sivertsen. They have kept the disappearance quiet. Waaler accepts full responsibility for resolving the situation, giving the others plausible deniability, and is given until midnight to locate Harry. That morning, Waaler’s men blackmail journalist Roger Gjendem into notifying them if Harry contacts him and blackmail a telecommunications employee into tracking Harry’s cell phone.

Meanwhile, at Harry’s request, Beate has the forensics team meet with tour groups who visited Frogner Park around five o’clock on Saturday (the location where Sivertsen completed his drops of guns and diamonds). He asks the tourists to share any photos they took, hoping he will find images of Sivertsen. Beate phones Harry to tell him that photos confirm Sivertsen was in the park on Saturday evening. They conclude that while some of Sivertsen’s story is substantiated, they don’t yet have images proving he was in the park when the murders took place. Beate reassures Harry that the forensics team is looking at more photos.

Sensing that Beate is hesitant and unsure, Harry demands that Sivertsen provide some evidence of his collusion with Waaler. Sivertsen has mentioned having photos from some of his meetings with Waaler in Prague and Harry tells him to contact Eva (his girlfriend) and send the photo to Beate. After resisting and attempting to attack Harry, Sivertsen gives Eva the instructions when she phones him.

A short time later, Beate phones Harry to warn that their cell phones and emails are being monitored by Waaler. Harry reassures her that he anticipated this and swapped phones with his taxi-driver friend Øystein Eikeland. None of the calls he is making to Beate will be traced back to him, and since his actual cellphone is being driven all over the city in Oystein’s taxi, it will be impossible to track. Nonetheless, Beate does not want the photo emailed to her. Instead, Harry knocks on the door of one of the students living in the residence and asks to use her computer (posing as a police officer who is still part of the investigation). He emails Eva and she sends him the photo of Sivertsen in Prague with an obscured man, who could plausibly be Waaler.

At a Russian Orthodox church, priest Nikolai Loeb hears confession from an unidentified man who admits to an affair with a woman who was murdered while pregnant (implying that this woman was Camilla). The man explains that he loves his wife (not the deceased woman) and has seen her with a policeman (this is a reference to Vibeke’s meetings with Harry); he expresses a vague but ominous impulse that jealousy stirs within him. After the man leaves the confessional, the priest is disturbed and suspects he recognizes the man as someone he has seen before.

At 2:00 pm, Bjørn Holm shows Beate a photograph that forensics investigation has located. The photo shows a masked cyclist holding a bag in Frogner Park and was taken around 5:30 (about 30 minutes after Barbara was killed). This photo might corroborate Sivertsen’s story, if the cyclist is the killer, retrieving the smuggled items in preparation for the next crime.

They show the photo to André Clausen, who tentatively identifies the figure as possibly the person he saw at the law office. Beate notices Clausen has a fresh facial cut and blood on his fingers, which he attributes to rough play with his dog.

Harry explains a theory about the killer’s identity to Sivertsen, based on something in the Prague photograph. Sivertsen continues to insist that he won’t provide any information against Waaler until Harry has proof of the killer’s identity (he wants to be sure that he will not be accused of the murders), and he also wants police protection. Harry suggests leaking the story about the Courier Killer and Waaler’s arms smuggling to the newspaper, and Sivertsen agrees. Harry calls Gjendem (he does not know that Gjendem is going to inform Waaler if he hears from Harry) and tells him he has a story; Gjendem expresses interest but insists on meeting with Harry for details. The two men arrange to meet at a bar at 5:00 pm. Harry also calls Beate to enlist forensics to work on an unstated task.

Meanwhile, the telecommunications professional who has been trying to track Harry’s phone calls Waaler with his theory that Harry has switched phones with a taxi driver. Shortly thereafter, Oystein picks up an unnamed passenger (presumably Waaler) who threatens him into revealing that he has Harry’s cell phone hidden in his taxi. Waaler also demands to know where Harry is hiding, but Oystein doesn’t know. They are interrupted when Waaler receives a call informing him about the meeting between Gjendem and Harry. He orders Oystein to drive him to the bar.

Rakel dozes at Frogner swimming pool while watching Oleg. A sudden wind gust wakes her, and she panics when she cannot immediately locate him, finding him talking with a classmate by the diving pool. Near 5:00 pm, she takes him home. When they arrive home, she locks the door.

Roger Gjendem arrives at Underwater Bar at 5:00 pm, but Harry does not appear. At 5:30, a man in a leather jacket enters, makes a throat-slitting gesture at Roger, and leaves. Roger receives a call from a familiar but unknown voice, ordering him to wait until 8:00 pm. While waiting, he chats with a red-haired woman (implied to be Vibeke, since she has met Harry in this bar before).

At the student residence, Harry tells Sivertsen he skipped the meeting because Gjendem referred to Waaler as an inspector rather than a leading policeman (a coded warning that the meeting was compromised). Harry turns off the mobile, reasoning that since Øystein missed their scheduled check-in call, Waaler’s team has likely discovered the phone swap and can now track them.

Harry calls Beate from a pay phone; she confirms that an expert has now analyzed the sample he asked her to look at and that his theory was correct (it is not stated what this theory was). Just after Harry hangs up Tom Waaler bursts into Beate’s office. He threatens her, demanding to know where Harry is. She summons Bjørn Holm via intercom, forcing Waaler to leave, but he threatens to return.