--be sure you have permissions from DBA, and configured server:
/*
exec sp_configure 'show advanced options', 1
reconfigure with override
exec sp_configure 'xp_cmdshell', 1
reconfigure with override
*/

declare @sql nvarchar(max);
declare @files table (fname sysname);
insert @files values ('1'),('2'),('3');
set @sql = (
	select replace('exec sys.xp_cmdshell ''copy \\server1\Images\<Item_number>.bmp c:\temp'';','<Item_number>',fname) 
	from @files for xml path('')
)
print(@sql);
--exec(@sql);