varstring: decode, not encode
4.1.5