declare function-scoped var to avoid global leak

in TlvDecoder.prototype.readEntendedVarNumber.

By not declaring 'result' and simply assigning it a value, we leak it to the global scope. detected by mocha testing dependent code in the browser.