Description
According to https://msdn.microsoft.com/en-us/library/cc245922.aspx and https://msdn.microsoft.com/en-us/library/cc245919.aspx it is said that the lpPassword parameter is a pointer to an ANSI password string.
lpPassword: A Password value for the service record (section 3.1.1) as a pointer to a null-terminated ANSI string that contains the password of the account whose name was specified by the lpServiceStartName parameter.
As far as I understood the current code the password is converted to UNICODE in the CreateServiceA and ChangeServiceConfigA (in advapi32.dll) before actually calling the corresponding RPC functions.