From VOGONS thread https://www.vogons.org/viewtopic.php?f=9&t=60095
Another code bug revealed with the POP ES instruction: it wasn't using the operand size to perform the 16-bit POP. So it was always increasing/decreasing (E)SP with 2 instead of the proper 4.
Test for this.