Similar Items: Agentic Vulnerability Reasoning on Windows COM Binaries