Better use CreateDirectoryW instead. Didn't you see that post last week on HN? All the "A" functions are broken and susceptible to attack.