when i test with 2015-10-29 RE client, i encounter this too. just change the "saleopen" packet to 0xa3d, and extend the length to 18 will make registration work. i suppose they just use 2 bits to send item amount.
however i doubt 0x9b2 and 0x9c4 still works.