NTR has unlocked all the syscalls, however the debug flag is disabled on retail units by default.
See here for how to enable the debug flag for all process:
https://github.com/yuriks/bootstrap/tree/debug-flag
Can you say how the write() command works? Or does that run in kernel mode or something and that's why?