The analogy theorem in Hoare logic