关于if (!(Irp->Flags & (IRP_NOCACHE | IRP_PAGING_IO | IRP_SYNCHRONOUS_PAGING_IO)))的判断

我在SfWrite中加入if (!(Irp->Flags & (IRP_NOCACHE | IRP_PAGING_IO | IRP_SYNCHRONOUS_PAGING_IO)))判断，每次保存文件时就进入这个判断语句，所以文件就不能正常加解密，去掉上面的判断就没问题，是怎么回事》？

You need to show more code here.

This IF condition is used to check if  the WRITE IRP is non-cached or not. I think you may need to remove NOT (!) from your IF condition.

Suggest reading the book "NT File System Internals" to get yourself familiar with READ/WRITE operations.