A registrant may not: distribute or dispense a controlled dangerous substance listed in Schedule I or Schedule II in violation of § 5-303(d) of this title; or distribute a controlled dangerous substance listed in Schedule I or Schedule II in the course of the registrant’s legitimate business, except in accordance with an order form under § 5-303(d) of this title. If the trier of fact specifically finds that a person knowingly or intentionally violated subsection (a)(1) of this section, the person is guilty of a misdemeanor and on conviction is subject to imprisonment not exceeding 2 years or a fine not exceeding $100,000 or both. In all other cases, a person who violates subsection (a)(1) of this section is subject to a civil penalty not exceeding $50,000. A person who willfully violates subsection (a)(2) of this section is guilty of a felony and on conviction is subject to imprisonment not exceeding 10 years or a fine not exceeding $100,000 or both.