Leseprobe: Formal Verification of Concurrent Embedded Software