I'm actually surprised you didn't just snag SP3 first - if memory serves SP3 carries a lot of the critical updates with it, and there's a good number of updates that are security updates to stuff like IE6/7, which are promptly replaced with an update that installs IE8 later.
Dunno if it works...